Your first audit

This tutorial walks through publishing your first audit end-to-end: generating a signing key, setting up a log you control, drafting and signing an audit of a package you use, and verifying it shows up when someone consumes your log.

TODO: write me. The intended outline is:

1. Generate a signing key (openvet key new).
2. Initialise a personal log (commands TBD).
3. Pick a package you use, draft an audit (openvet audit new).
4. Edit the audit in the TUI, fill in the claims.
5. Sign the audit (openvet audit sign).
6. Publish it to your log (openvet audit publish).
7. Verify another machine can consume the log and see your audit.