huskies: merge 1169 story Gateway pulls signed artifacts from a release channel into its local store

Cargo.lock

@@ -1953,6 +1953,7 @@ dependencies = [
  "pulldown-cmark",
  "rand 0.10.2",
  "regex",
+ "release-manifest",
  "reqwest",
  "serde",
  "serde_json",
@@ -3768,6 +3769,26 @@ version = "0.8.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
 
+[[package]]
+name = "release-manifest"
+version = "0.1.0"
+dependencies = [
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "release-tool"
+version = "0.1.0"
+dependencies = [
+ "ed25519-dalek 3.0.0",
+ "rand 0.10.2",
+ "release-manifest",
+ "serde_json",
+ "sha2 0.11.0",
+ "tempfile",
+]
+
 [[package]]
 name = "reqwest"
 version = "0.13.4"