Support SCITT (Supply Chain Integrity) receipts

[jagmarques]

SCITT (Supply Chain Integrity, Transparency, and Trust) is an IETF standard for transparent claims about software artifacts. Agent audit trails are a natural fit.

This would allow asqav signed action records to be submitted to a SCITT transparency log, providing independent third-party verification that the audit trail existed at a specific time.

References:

• https://scitt.io
• IETF draft-ietf-scitt-architecture
• Microsoft's SCITT implementation: https://github.com/microsoft/scitt-ccf-ledger

Would need:

• SCITT receipt format adapter
• Option to submit action hashes to a SCITT transparency log
• Verification of SCITT receipts alongside ML-DSA signatures

[jagmarques]

Closing - no demand signal. Will reopen if there's interest.