Cosign verification succeeds on the public digest, but deployment pulls from a private mirror that serves a different manifest

Supply chain checks pass during build, yet the runtime artifact is not the one that was signed because the mirror rewrites the digest target.