feat(referrers): public API #435
Description
We have added a referrer discovery API in our latest release https://github.com/chainloop-dev/chainloop/releases/tag/v0.30.0
This API returns referrer items associated with one of the current user organizations. This task is about
- allow organizations to expose referrers to a common, index, as an index that's shared across organizations
- allow the chainloop instance to have control on what organizations can actually publish to the index, some sort of "trusted publisher" approach.
We currently have a way to make attestations and artifacts public #263, we should probably piggy back on the same approach.
This would mean that an organization that a) makes a workflow public and b) and it's in the allowlist for publishers will get the referrers associated with such workflow to the index.