Extract `attestation-types` crate from `attestation` (no dcap-qvl)

[pbeza]

Background

The attestation crate currently mixes dcap-qvl-free types and helpers (Measurements, ReportData, TcbInfo, the post-DCAP verification helpers) with the dcap_qvl::verify::verify call. Anything that wants to use those types is forced to link dcap-qvl transitively. Carving them into a new no-dcap-qvl crate is the precondition for mpc-contract to drop the dep.

User Story

As an MPC contract maintainer, I want the post-DCAP types and helpers to live in a dcap-qvl-free crate so that mpc-contract can use them without pulling dcap-qvl into its WASM.

Acceptance Criteria

• New crate attestation-types under crates/.
• Owns Measurements, ExpectedMeasurements, ReportData, TcbInfo (+ event log helpers), app_compose, and the verify_post_dcap::* helpers.
• No dependency on dcap-qvl.
• attestation re-exports the moved modules so existing callers compile unchanged.
• Workspace builds + all tests pass.

Resources & Additional Notes

PR: #3245. Tracked by #3264.