feat: intel sgx attestation

[maceip]

sgx signed quote with notary-server pub key used as report-data

[codecov]

Codecov Report

Attention: Patch coverage is 46.98795% with 44 lines in your changes missing coverage. Please review.

Project coverage is 54.53%. Comparing base (30e4e37) to head (3d92843).
Report is 15 commits behind head on dev.

Files with missing lines	Patch %	Lines
crates/notary/server/src/tee.rs	46.15%	42 Missing ⚠️
crates/notary/server/src/server.rs	60.00%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##              dev     #630      +/-   ##
==========================================
- Coverage   54.55%   54.53%   -0.03%     
==========================================
  Files         192      193       +1     
  Lines       20518    20599      +81     
==========================================
+ Hits        11194    11233      +39     
- Misses       9324     9366      +42     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[yuroitaki]

👯‍♂️

[yuroitaki]

@sinui0 i've reviewed this but thought you should check this out too since you been reviewing notary server code - but no rush you can do it whenever you're free - if needed we can merge this first and address your reviews if there is any later. Thoughts? cc. @maceip

[maceip]

@sinui0 i've reviewed this but thought you should check this out too since you been reviewing notary server code - but no rush you can do it whenever you're free - if needed we can merge this first and address your reviews if there is any later. Thoughts? cc. @maceip

👴

[sinui0]

lgtm modulo a couple nits

[sinui0]

Why is this needed?

[maceip]

@sinui0 i wanted to make it explicit that the key can only be set once. so if someone figured out a way to exec the calling function again it couldnt be reset. not sure if thats possible or even if oncecell is the right way to do it