[adamtagscherer]

Adapts the CLI to the new trust model in ai-catalog-* and the spec after Agent-Card/ai-catalog#117.

[muscariello]

Heads-up @adamtagscherer: three PRs are now stacked on this branch, since they need the spec #117 trust model.

Order	PR	What it does
1	#61	this PR
2	#65	Sigstore services when signing, offline by default (--sigstore-services tlog,tsa, --signing-config); closes #62
3	#67	ai-catalog verify: release binding, did-web-v1 signatures, did:web key resolution; closes #63
4	#66	stores the Sigstore bundle with each Cosign signature; closes #64

Each PR's base is the one before it, so each diff shows only its own commits. Please merge in this order.

• If you rebase or force-push this branch, I'll rebase the stack on top.
• Like this PR, the stack builds only against the unreleased libraries (Agent-Card/ai-catalog-rust@055916d). feat: store the Sigstore bundle with each Cosign signature #66 also needs feat(oci): store the Sigstore bundle with a Cosign signature ai-catalog-rust#64. fix(oci): carry the signed trust manifest payload in its referrer ai-catalog-rust#63 fixes the trust-manifest referrer payload that cosign verify-blob checks against.

Let me know if you'd prefer these to wait until #61 lands.

[muscariello]

@adamtagscherer I pushed one commit to this branch: dfd9803 chore(deps): bump the ai-catalog crates to 0.4.0.

ai-catalog-rust 0.4.0 is now on crates.io with the spec #117 trust model, so this PR builds against released crates. The commit changes only Cargo.toml and Cargo.lock. Locally, tests, clippy and fmt all pass. It's a fast-forward on top of your commit, so nothing of yours was rewritten.

One behaviour change comes with it: since Agent-Card/ai-catalog-rust#61, validate() reports at most Discoverable, and only verify() reports Trusted. The README line for ai-catalog validate still says "Minimal / Discoverable / Trusted". #67 in the stack updates it.

The stack on top (#65 → #67 → #66) is rebased onto this commit.