refactor attestation for multi-provider support

Add the dstack-attest crate with versioned attestations, runtime events, and platform-aware modes (dstack, GCP, Nitro).

Migrate RA-TLS, guest-agent, KMS, verifier, and tdx-attest wiring to the new attestation/eventlog flow with cert embedding and legacy fallback.

Introduce Attest RPC and SDK support; update gateway ACME and cert quoting to emit attestations.

Extend types/configs for TPM key provider and host-share disk label; update system setup and docker compose orphan cleanup.

Author: kvinwang

.github/workflows/rust.yml

@@ -20,8 +20,9 @@ jobs:
     - uses: actions/checkout@v4
 
     - name: Install Rust
-      uses: dtolnay/rust-toolchain@1.86
+      uses: dtolnay/rust-toolchain@master
       with:
+        toolchain: 1.92.0
         components: clippy, rustfmt
 
     - name: Run Clippy

.github/workflows/sdk.yaml

@@ -23,8 +23,9 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@1.86
+        uses: dtolnay/rust-toolchain@master
         with:
+          toolchain: 1.92.0
           components: clippy, rustfmt
           # This additional target is needed for wasm32 compatibility check.
           targets: wasm32-unknown-unknown, thumbv6m-none-eabi