Provide DB backed implementation of RegistryStateService (#191)

This mirrors the previous PR which provided a file backed implementation. This will be wired in a future PR.

Note that I changed the DB schema to match the existing sync status structure to simplify implementation. I also added a uniqueness constraint since we now assume that there is only one row in registry_sync per registry.

This PR also renames the LOCAL enum type to MANAGED, and ensures that configurations cannot change the registry type.

Implement the publish endpoint (#188)

* Implement the publish endpoint for managed registries

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>

* Update the tests

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>

* Add tests and handle server not found when deleting

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>

* Return not-implemented for aggregated publish API

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>

---------

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>

fixes the paths from pkg/ to internal/ (#140)

Signed-off-by: Chris Burns <29541485+ChrisJBurns@users.noreply.github.com>

Downgrade cosign-installer from v4.0.0 to v3.10.1 to fix signing fail…

…ure (#22)

The cosign-installer v4.0.0 installs cosign v3.x which has breaking changes
in the sign-blob command that are incompatible with our goreleaser
configuration. Cosign v3.x requires the --bundle flag with signing configs,
causing the release workflow to fail with:
"Error: must provide --bundle with --signing-config or --use-signing-config"

Evidence:
- Toolhive hit the same issue in v0.3.10 release (Oct 17, 2025)
- Fixed by reverting to cosign-installer v3.10.1 in commit 012d3b88
- v3.10.1 installs cosign v2.6.1 which works with existing config

This matches the version used by the main toolhive project.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>