Issue
POST /v1/attestations
Authorization: Bearer <ACT>
{
"entryDid": "...",
"attestation": { "type": "build-reproducible", "attesterDid": "...", "issuedAt": "...", "evidence": "...", "signature": "..." }
}
List
GET /v1/attestations/<did>
{ "attestations": [ /* ... */ ] }