Fix go dependency with go-cose library.

[orsenthil]

What type of PR is this?

This indirect dependency was causing reference failures in IntelliJ.

Which issue does this PR fix?:

go list -modfile=go.mod -m -json -mod=go.mod all #gosetup

fails with

go: github.com/veraison/go-cose@v1.2.0: invalid version: unknown revision v1.2.0

As older modules are retracted

https://pkg.go.dev/github.com/veraison/go-cose?tab=versions

And this needs to be pinned to v1.1.0

What does this PR do / Why do we need it?:

So that go list is successful.

{
	"Path": "github.com/veraison/go-cose",
	"Version": "v1.2.0",
	"Replace": {
		"Path": "github.com/veraison/go-cose",
		"Version": "v1.1.0",
		"Time": "2023-05-18T12:32:47Z",
		"GoMod": "/Users/senthilx/go/pkg/mod/cache/download/github.com/veraison/go-cose/@v/v1.1.0.mod",
		"GoVersion": "1.18"
	},
	"Indirect": true,
	"GoMod": "/Users/senthilx/go/pkg/mod/cache/download/github.com/veraison/go-cose/@v/v1.1.0.mod",
	"GoVersion": "1.18"
}

[orsenthil]

No need. As the change was introduced in #2895