Chainguard Checks turns CI into an agent tool call with signed attestations

Now in beta, Checks lets coding agents run CI mid-session in credential-free, egress-restricted microVMs from warm dependency snapshots, with failure logs fed back into the agent's context. Each passing run emits a signed attestation that merge gates can verify instead of re-running the test suite.