fix(ci): verify registry upload against exported OCI config

src/test/publish-container-harness.sh

@@ -18,9 +18,9 @@ curl() {
  cat > "$output" <<'MOCK'
 #!/usr/bin/env bash
 echo "regctl $*" >> "$TEST_DIR/calls"
-if [[ "$1 $2" = "image import" && "$SCENARIO" = upload-fails ]]; then exit 1; fi
+if [[ "$1 $2" = "image copy" && "$SCENARIO" = upload-fails ]]; then exit 1; fi
 if [[ "$1 $2" = "manifest get" ]]; then
- if [[ "$SCENARIO" = wrong-config ]]; then echo sha256:wrong; else echo sha256:candidate; fi
+ if [[ "$SCENARIO" = wrong-config && "$3" != ocidir:* ]]; then echo sha256:wrong; else printf "sha256:%064d\n" 0; fi
 fi
 MOCK
 }