feat(tng-wasm/www): add ITA provider support to the Pages demo

[imlk0]

Summary

Add Intel Trust Authority (ITA) as a selectable Attestation Service provider in the tng-wasm/www/ GitHub Pages demo, alongside the existing CoCo/Trustee path. No Rust changes — the wasm build already enables verifier-ita (the wasm32-unknown-unknown target in tng/Cargo.toml pulls rats-cert with verifier-ita).

Changes

• tng-wasm/www/js/config.js (new, pure / DOM-free): buildTngConfig(inputs) + visibleFields(provider, model) emit the { ohttp, verify } config per the provider×model field matrix, omitting non-default fields (as_provider only for ITA; ITA passport suppresses stale as_addr/api_key). Emitted field names match tng/src/config/ra.rs and tng-wasm/src/fetch/attestation.rs.
• index.html + i18n.js: AS Provider <select> (CoCo/Trustee vs ITA) with conditional ITA API-key and JWKS-URL fields; bilingual en/zh strings.
• app.js: thin DOM-reading wrapper over config.js; toggles field visibility, prefills the ITA API URL, gates Send on ITA api-key validity, and re-applies the ITA placeholder on language switch. The API key is not persisted to localStorage.
• css/styles.css: [hidden] { display: none !important } so author label { display: flex } no longer overrides the UA [hidden] rule (conditional <label hidden> rows were staying visible).
• Tests: tng-wasm/tests/config.test.mjs (node --test, make www-test, 9 cases) covers the field matrix + edge cases.
• CI: .github/workflows/build-wasm-sdk.yml runs make www-test in build-and-release, after checkout/toolchain and before the AA/AS service startup (fast fail-fast logic gate needing only node).

Field matrix

as_provider	model	as_addr	api_key	ita_jwks_addr	policy_ids	skip_as_token_cert_verify
coco	background_check	✓ user AS	—	—	✓	optional
coco	passport	✓ user AS	—	—	✓	optional
ita	background_check	✓ (prefilled ITA API URL)	✓ required	optional	✓	hidden
ita	passport	hidden	hidden	optional	✓	hidden

Testing

• make www-test → 9/9 pass (config matrix + edge cases).
• CoCo path behavior unchanged.

Live demo

Once merged to master, the deploy-pages job rebuilds and publishes https://inclavare-containers.github.io/TNG/ (the .wasm bundle is rebuilt by CI).

[shankailun-aliyun]

@imlk0 ，您好，您的请求已接收，请耐心等待结果。

[shankailun-aliyun]

@imlk0 ，您好，未检测到有镜像需要构建，如需重新检测请评论 /start 。