Most sigs only have maintainers listed in sig-info.yaml while
there're still several sigs only have OWNERS. So change to
extract maintainers first from sig-info.yaml and use OWNERS
as backup.