provide source/signature outputs even if rekor is unused

entrypoint.sh

@@ -43,10 +43,10 @@ while IFS=  read -r f; do
     # echo "INDEX_${i}=$(echo "$output"|cut -d, -f1|cut -d\  -f5)" >> "${GITHUB_OUTPUT}"
     # The parsing, though, is identical
     echo "URL_${i}=$(echo "$output"|cut -d: -f2-|cut -d\  -f2)" >> "${GITHUB_OUTPUT}"
+  fi
   echo "SOURCE_${i}=${f}" >> "${GITHUB_OUTPUT}"
   echo "SIG_${i}=${dest_sig}" >> "${GITHUB_OUTPUT}"
   i=$((i+1))
-  fi
 done <<ALLFILES_INPUT
 $all_files
 ALLFILES_INPUT