Emit a spec-native tine-attest/1 attestation object over a run oid (target_id, claim, evidence_ids, ed25519 signature) and return its stored bytes, oid and fsck-clean self-check.