Merge pull request #8 from dmcgowan/wip_provenance

Update pull to use manifest data from registry
WIP: trust graph integration