also looking at this

feat: own runtime firmware candidates

#49

Merged chris wants to merge codex/runtime-candidate-ownership into main

24 files +1245 -92

ce65c903e9 feat: prepare runtime images with protected trust Chris Breuer review this step
a70af6195d docs: align update acceptance with protected preparation Chris Breuer review this step
eb2be47cf4 feat: own runtime firmware candidates Chris Breuer review this step