feat: use OCI registry as a configuration storage

[smira]

Drop additional configuration ID HMAC, and instead take direct sha256 of the contents. This matches content-addressable scheme of the OCI registry, so we can use it directly.

Fixes #2

[smira]

/ok-to-test

[smira]

/m