manifest authority

[drernie]

We need an additional type of "manifest_grant" where RAJEE:

• takes a registry, package name, and hash
• uses quilt3 to verify the existence of a physical key

This presumably will require an external (lambda) authorizer.