Merge branch 'main' into docs/adr-022-artifact-maturity

Author: mchmarny

.settings.yaml

@@ -142,7 +142,7 @@ testing_tools:
     linux_amd64: '6d31c65b03972c6dc4a14ab429f2928300518b26503f58723e532d1b0a3bbb52'
     linux_arm64: 'b98f2cc69fd9147fe4d405d859c57504571adec0d3611c3eefd04107c7ac00d0'
   # renovate: datasource=github-releases depName=kubernetes-sigs/karpenter depType=testing_tools
-  karpenter: 'v1.14.0'
+  karpenter: 'v1.14.1'
   # In-cluster OCI registry for KWOK deployer-matrix CI (issue #843).
   # Pulled from ECR Public (AWS's first-party mirror of Docker official
   # images): anonymous Docker Hub pulls rate-limit on shared CI runners

docs/contributor/index.md

@@ -201,7 +201,6 @@ both entry points share it. Adding business logic to `pkg/cli` or
 | `pkg/oci` | OCI artifact push/pull for evidence and bundles |
 | `pkg/mirror` | Air-gap mirror for charts and images |
 | `pkg/trust` | Sigstore trust root management |
-| `pkg/build` | Build provenance metadata |
 | **Cross-cutting** | |
 | `pkg/k8s/client` | Singleton Kubernetes clientset (in-cluster + kubeconfig) |
 | `pkg/k8s/pod` | Shared K8s Job/Pod helpers (wait, logs, ConfigMap URI parsing) |

docs/integrator/public-api.md

@@ -46,7 +46,6 @@ in the [Go library integration guide](./go-library.md).
 | `pkg/oci` | Internal | OCI registry helpers. |
 | `pkg/logging` | Internal | Logging setup. |
 | `pkg/header` | Internal | HTTP header helpers. |
-| `pkg/build` | Internal | Build-time metadata. |
 | `pkg/server` | Internal | aicrd HTTP server: middleware chain and REST handlers (thin adapters over `pkg/client/v1`). Consumers use the HTTP API, not the Go types. |
 | `pkg/cli` | Internal | CLI command implementations. |