Security-first AI artifact registry — digest-based storage, policy-gated promotion, signed provenance, and reproducible trust metadata for local models, adapters, and tokenizers

Default-deny policy gateway for LLM/agent tool calls. Rate limiting, path validation, argument filtering, audit logging.