feat: Add new provenance and crypto registry documentation

- Introduced attestation inventory and subject-rekor mapping files for tracking Docker packages.
- Added a comprehensive crypto registry decision document outlining defaults and required follow-ups.
- Created an offline feeds manifest for bundling air-gap resources.
- Implemented a script to generate and update binary manifests for curated binaries.
- Added a verification script to ensure binary artefacts are located in approved directories.
- Defined new schemas for AdvisoryEvidenceBundle, OrchestratorEnvelope, ScannerReportReadyPayload, and ScannerScanCompletedPayload.
- Established project files for StellaOps.Orchestrator.Schemas and StellaOps.PolicyAuthoritySignals.Contracts.
- Updated vendor manifest to track pinned binaries for integrity.

offline/feeds/manifest.json

@@ -0,0 +1,12 @@
+{
+  "generated_utc": "2025-11-18T21:41:23.244597Z",
+  "summary": "Offline feed bundles registered here. Add entries when baking air-gap bundles.",
+  "feeds": [
+    {
+      "name": "telemetry-offline-bundle",
+      "path": "offline/feeds/telemetry-offline-bundle.tar.gz",
+      "sha256": "49d3ac3502bad1caaed4c1f7bceaa4ce40fdfce6210d4ae20c90386aeb84ca4e",
+      "description": "Telemetry offline bundle (migrated from out/telemetry)"
+    }
+  ]
+}