Building on initial OTA-910 Cincinnati implementation work, teach Cincinnati to serve the OTA-912 graph-data API.
OTA-914 Teach oc-mirror to include signatures in graph-data images
OTA-910 Teach Cincinnati to retrieve signatures from upstream sources
OTA-912 Define an API for Cincinnati including signatures in graph-data tarballs