Public anonymous-pull registry for sslbrain customer artefacts. Only the signed appliance image lives here. URL is intentionally not advertised; signing model (sslbrain-sigverify against pinned trust anchors) provides the actual trust.
