Add com.joinmonolith.sha256 (Monolith SHA-256 content fingerprint)

[deblanco]

Adds one entry registering the Monolith SHA-256 content fingerprint as com.joinmonolith.sha256 (type fingerprint).

Resolution

softBindingResolutionApis points at https://api.joinmonolith.com/api/c2pa, a Soft Binding Resolution API that is publicly readable on its spec paths, no credentials required:

GET /api/c2pa/services/supportedAlgorithms
  -> 200 {"fingerprints":[{"alg":"com.joinmonolith.sha256"}]}

GET /api/c2pa/matches/byBinding?alg=com.joinmonolith.sha256&value=<base64>
  -> 200 {"matches":[...]}

GET /api/c2pa/manifests/{manifestId}
  -> 200, or 404 for an unknown id

Manifests are independently resolvable without credentials through the GeneralizedClaimRegistry contract on the Stability Protocol network (0xfE9daFC133eD3e9726D4B2c24b8cC3c3AaDD8225, chain 101010) via the C2PA Federated Lookup smart-contract interface. That path is documented at the informationalUrl.

Checklist against the README criteria

• Conforms with the schema, all mandatory fields present — validated locally against softbinding-algorithm-list.schema.json
• Not malicious or spam
• Submitted by an individual affiliated with the company owning the algorithm
• URLs resolve — informationalUrl and the SBR API spec paths all return 200 (see the note above about the bare base path)
• Supports extracting a soft binding identifier for the purpose of manifest recovery
• New entry, so the identifier / alg / type immutability rule does not apply

[domguinard]

This entry will be reviewed and approved during the Watermarking task force meeting on August 5th.

[domguinard]

Approved by the WM TF - pending resolution of the PR conflicts.

[deblanco]

@domguinard I think it's ready to go now

Thanks