sigstore would likely not be in the list of Microsoft's accepted certs.

Another option would be to publish straight to Microsoft store which I believe is free.