Story #9510

Updated by about 1 month ago

Signatures that were: were
* mirrored from remote source
* produced by Pulp Container Registry
* pushed into Pulp Container Registry by clients
will be stored in the local sigstore and hosted at hosted at ``

Add new Signature model which will have many to one relationship to the Manifest.
On manifest deletion, it's signatures will be also removed.

**Q:** store the signature in the DB ( it is a json file) or as an artifact?