Support "real" registries with ORAS

[isc-tleavitt]

Just realizing we never had an issue for this (though we do have a PR); it relates to #281 but ultimately is a distinct task.

As part of this, we need to support deployed artifacts with the possibility of multiple artifacts of the same package version targeting different platform versions, and have the client be able to distinguish between them and select the right one.