Proposal: Trust system

Documentation for the trust system which will be used for provenance and the V2 registry.  The trust system is intended to be generic and able to be used for a wider range of authorizing users through their public key.
`.dockercfg` only to keep existing behavior.  I think `.docker/` directory is better, but current login configuration is in `.dockercfg`.