Sigstore Rekor API (consumed)

Rekor is the Sigstore transparency log that cosign writes to and reads from when recording and verifying signing events. The public Rekor service exposes a REST API at rekor.sigstore.dev with operations for creating log entries, retrieving entries by index or UUID, fetching log info and proofs, and searching the index. Ownership: Rekor is a sibling project of Cosign inside the same GitHub organization (github.com/sigstore) and the same OpenSSF Sigstore project. It is recorded here as a CONSUMED dependency of the Cosign CLI, not as an API Cosign produces; the Rekor contract is profiled in its own right under all/sigstore.