Artifacts

The Kubernetes plugin and CRI plugin consume one compiled provenance lock for K3s, runc, CNI, and critest. This module is a compatibility re-export; validation and provisioning are owned by the shared artifacts crate.