Signing verifies the tarball provenance but deployment consumes an OCI reference that was never attested

The release report shows a verified artifact, but the runtime image came from a different reference path than the object the signing step covered.