usage: bootstrap.sh --registry <host[:port]> --channel <name> --pubkey <channel.pub> [options]
required
--registry channel registry host[:port]
--channel channel name, e.g. acme-stable
--pubkey cosign public key of the channel; the kit signature is checked
against THIS key and nothing else
options
--version kit version to fetch, vX.Y.Z (default: the 'latest' tag)
--dest where to unpack (default: ./vexa-kit)
--insecure registry TLS is self-signed (test rigs)
--plain-http registry is plain HTTP (test rigs)
--keep-tarball keep the downloaded tarball next to --dest