v2.8.0

Changelog

• bb3578a Accept an empty digest as unpinned; test the loader
• 005fd45 Add #ImageRegistry schema for managed image pins
• 9f96ae3 Add crei image add: register and pin an image in one step
• 2a0fa7c Add crei image outdated and pin (registry drift + digest write-back)
• 144969f Add named lint rules with [lint] severity config
• ce56879 Add registry client: ref parsing, digest resolution, created time
• bc55bfc Allow DNS=none on containers, exclusive with addresses
• 7b5895c Label build-hash-only diffs instead of showing the raw hash swap
• 2bf372b Resolve registry auth from podman's auth.json locations
• f6ee4f5 Split image entries into image + digest with a computed #ref
• ffe4dc4 Stamp a content hash on builds and consumers for rebuild staleness
• 27ae735 init: scaffold registries/images.cue and wire the import
• 3ed38d6 init: skip the sample main.cue in an existing project