0009 spike notes — public OCI registry

Spike notes for the public OCI registry: Lambda Distribution front, S3 blobs, and cosign-gated promote. Private repository paths are omitted from this public summary.