Registry and discovery

Explicit, digest-pinned workload package registry and safe installed discovery.

::: scimesh.sdk.registry options: show_root_heading: false