//! Forge Attestation Provider — Supply-chain attestation: verifies (and produces) per-unit manifests (PCB serial, batch ID, SE/MCU lot numbers, firmware manifest, build provenance) per in-toto v1.0 / SLSA v1.0. Manifests published to a transparency log; serial-plate short-hash for visual verification.
