Static OCI registry plan

This public design note keeps the implementation summary visible while leaving private automation and repository details out.