attest to configuration properties

[errordeveloper]

Tape should be able to attest to some configuration properties, e.g. if flat manifests are used, and tape has set image digests, it should attest that the config is hermetic. However, this only applies to configuration, as applications may exhibit non-hermetic behavior at runtime.