Trust-signal pill: show the count even at 0 (when attestations are configured)

"✓ 0" on the latest version is a real signal — this package has no published
audits — so show the pill at zero too, instead of hiding it. Gate on the
attestation config being present (rather than count > 0) so the pill stays
absent when the feature is dormant (no trusted attesters configured).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: mdgeorge4153

app/src/components/single-package/SinglePackageTrustSignals.tsx

@@ -12,23 +12,27 @@ import { useGetMvrVersionAddresses } from "@/hooks/useGetMvrVersionAddresses";
 import { Text } from "../ui/Text";
 import LoadingState from "../LoadingState";
 import ExplorerLink from "../ui/explorer-link";
-import { type TrustedAttestor } from "@/lib/attestations";
+import { attestationConfig, type TrustedAttestor } from "@/lib/attestations";
 import { CheckIcon } from "@/icons/single-package/CheckIcon";
 import { WarningIcon } from "@/icons/single-package/WarningIcon";
 
-/** Tab label: a pill with the count of live attestations. */
+/** Tab label: a pill with the count of live attestations on the latest version.
+ *  Shown whenever attestations are configured — "✓ 0" is itself a signal (this
+ *  package has no published audits), so it shows even at zero. */
 export function TrustSignalCount({
   address,
   network,
 }: {
   address: string;
   network: "mainnet" | "testnet";
 }) {
+  const cfg = attestationConfig();
   const { data } = useGetAttestations(address, network);
   const positives = (data ?? []).length;
 
-  // Attestations are a mainnet-only feature in the demo.
-  if (network === "testnet" || !positives) return null;
+  // Mainnet-only, and only when attestations are configured (the feature is
+  // dormant — no pill at all — when there are no trusted attesters).
+  if (network === "testnet" || !cfg) return null;
   return (
     <div className="flex items-center gap-2xs">
       <CountPill