Part of #1486. Depends on the centralization issue. Highest-risk item — review with supply-chain lens.

Migrate the host of in-toto predicateType / SLSA buildType / provenance URIs from aicr.nvidia.com to aicr.run. Paths unchanged (/bundle/v1, /recipe-evidence/v1, /recipe-catalog/v1).

• pkg/bundler/attestation/statement.go — BundleBuildType, CatalogBuildType
• pkg/evidence/attestation/types.go — PredicateTypeV1
• pkg/bundler/deployer/localformat/provenance.go — ProvenanceAPIVersion
• aicrBundleNamespace UUIDv5 seed moves to https://aicr.run/bundle/v1 → deterministic bundle IDs change

Acceptance criteria

• Predicate/buildType/provenance URIs use aicr.run host, identical paths
• Signed-artifact goldens (attestation, BOM) regenerated
• Deterministic UUIDv5 namespace reset documented in PR + changelog/release notes
• Note the verified trust tier still requires NVIDIA-CI identity + no external data (unchanged by host rename)
• make qualify green