pub(crate) fn run_artifact( artifact: PathBuf, signature: PathBuf, trust_file: PathBuf, now: DateTime<Utc>, freshness_window_secs: u64, ) -> ExitCode