Change securesystemslib.dsse.Envelope.signatures to dict upstream #2564
Description
yeah, the TODO feels right -- even if the serialized format is a list, that's just `list(self.signatures.values())` away if self.signatures is a dict
Originally posted by @jku in #2436 (comment)