v0.28.0-rc.1

What's Changed

• feat: Auto-track c2pa-rs's main branch by @scouten-adobe in #309
• ci: Restore full CI job set for the standalone repo by @scouten-adobe in #308
• docs: Fix dangling contentauth/c2pa-rs links by @scouten-adobe in #307
• feat: Restore full release infrastructure for stable + release-process.md by @scouten-adobe in #310
• docs: Add CI, crates.io, and codecov badges to README by @scouten-adobe in #312
• docs: Add support-tiers.md for c2patool by @scouten-adobe in #313
• ci: Add commit-lint enforcement for PR titles by @scouten-adobe in #315
• feat: Open an immediate PR on stable when c2pa-rs publishes a release by @scouten-adobe in #316
• chore: Enable Dependabot version updates, excluding c2pa by @scouten-adobe in #317
• ci: Version-control GitHub labels via labels.yml by @scouten-adobe in #311
• docs: Document --trust_list_uri and init trust subcommand by @scouten-adobe in #303
• chore: bump dtolnay/rust-toolchain from fa04a1451ff1842e2626ccb99004d0195b455a88 to d1031067263f94b142dd6c0ce24c5eb9d02d52a0 by @dependabot[bot] in #319
• fix: Bump MSRV to 1.96.0 and fix release-binary paths by @scouten-adobe in #326
• fix: Use CROSS_ORG_PR_TOKEN for release-rc.yml workflow dispatch by @scouten-adobe in #327

Full Changelog: v0.27.20...v0.28.0-rc.1