implement ARTIFACT_REF material type

[JeffResc]

Implements a new ARTIFACT_REF material type that allows attesting large artifacts without uploading them to CAS.

Usage

chainloop att add --name my-artifact --value /path/to/file.tar --kind ARTIFACT_REF

Testing

• Unit tests verify digest calculation, file validation, and no CAS upload
• All existing tests pass