Make V2 code more defensive against malformed content

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
Use direct registry url

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
Update pull message and log

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
Add status message for V2 pull

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
Update manifest format to rename blobsums and use arrays of dictionaries

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
Support tarsum dev version to fix issue with mtime

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
Update verification message

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
Enable V2 pull flow

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
Merge pull request #8393 from dmcgowan/provenance_pull_enhance

Make V2 code more defensive against malformed content