Bump github.com/theupdateframework/go-tuf from 0.5.2 to 0.6.0

Bump github.com/theupdateframework/go-tuf from 0.5.2 to 0.6.0 #877