`apko_config` should resolve `include:` directives to lock the image configuration

[mattmoor]

See: https://github.com/mattmoor/include-example

The resulting image-configuration attestation is here.

cc @jonjohnsonjr @kaniini