TRACE-POC example via GHA

[craig-willis]

As discussed:

• POC trace server running on VM somewhere
  • Semi-reliable deployment
  • Real GPG key on a keyserver
  • Simple webpage
    • Description of what it is
    • Link to TRACE certificate
    • Instructions for how to verify a TRO
    • Link back to the Github repo with the commit that it's running (Server)
• GHA example
  • pip install trace-poc
  • trace-poc submit, download, verify
  • Attach artifact
• Cookie cutter
  • run.sh
  • Add programs, etc
  • No r2d, just Dockerfile

[Xarthisius]

Semi-reliable deployment (with gpg key) deployed at https://server.trace-poc.xyz/