Artifact & Image Registry

Store signed, versioned build outputs and container images so what runs in production is traceable to a commit.