SL Manifest docs & feedback

[kzu]

UPDATED: I've polished a v2.0.0-rc.1 version of the JWT manifest(s) used by the new SL (both sponsorable and sponsor).

Please give it a read and let me know your feedback 🙏: https://www.devlooped.com/SponsorLink/ (source at docs/spec/2.0.0-rc.1.md)

A sample library consuming this new manifest-based SL for testing the end-to-end experience is available at https://www.nuget.org/packages/SponsorableLib.

Please give it a try and provide early feedback.

[kzu]

That's why I'm giving ample time and opportunity to provide feedback.

[kzu]

Thanks @hilari0n, many of your comments are addressed in the latest spec and reference GH implementation spec. Yes, unsigned manifests was a dumb idea. A central one for all sponsorables was another lousy one.