pub(crate) fn run_rollout_manifest( manifest_path: PathBuf, signature_path: PathBuf, trust_file: PathBuf, now: DateTime<Utc>, freshness_window_secs: u64, expected_rollout_id: String, ) -> ExitCode