Add signed runtime distribution pipeline

tools/deployment/govoplan_deploy/bundle.py

@@ -24,6 +24,8 @@ GARAGE_CONFIG_FILENAME = "garage.toml"
 LOAD_BALANCER_CONFIG_FILENAME = "load-balancer.cfg"
 PLAN_FILENAME = "plan.json"
 RECEIPT_FILENAME = "receipt.json"
+MANIFEST_FILENAME = "distribution-manifest.json"
+KEYRING_FILENAME = "distribution-keyring.json"
 LOCK_FILENAME = ".deployment.lock"
 RUNTIME_ENV_KEYS = (
     "APP_ENV",
@@ -87,6 +89,8 @@ class BundlePaths:
     load_balancer_config: Path
     plan: Path
     receipt: Path
+    manifest: Path
+    keyring: Path
     lock: Path
 
 
@@ -104,6 +108,8 @@ def bundle_paths(root: Path) -> BundlePaths:
         load_balancer_config=resolved / LOAD_BALANCER_CONFIG_FILENAME,
         plan=resolved / PLAN_FILENAME,
         receipt=resolved / RECEIPT_FILENAME,
+        manifest=resolved / MANIFEST_FILENAME,
+        keyring=resolved / KEYRING_FILENAME,
         lock=resolved / LOCK_FILENAME,
     )