nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqp7yzx5xlvzzpn5sh8v7wvczxdwxqnwl5j0nusjhjcqshk6z2747qd8m32a so gittuf treats a github repo's refs like a resource in an authority-less P2P network?