trustee-cli cannot be built without verifier dependencies

[mythi]

Describe the bug

9abce39 dropped the verifier dependencies (TPM and DCAP libs) based on checking the code that these are not needed. The PR CI did not catch there are issues. However, a post-merge action shows issues and currently the image cannot be built.

Two problems:

• rework trustee-cli to not depend on kbs::attestation::config::AttestationServiceConfig::CoCoASBuiltIn; for config paths because this expects KBS is built using coco_as_builtin feature which pulls in verifier dependencies.
• add trustee-cli image to PR checks

How to reproduce

$ podman build . -f tools/trustee-cli/Dockerfile

CoCo version information

HEAD

What TEE are you seeing the problem on

None

Failing command and relevant log output

[mythi]

cc @spotlesstofu

[fitzthum]

We should add this to the PR checks.

The Trustee CLI does actually depend on the verifiers. It has this run feature here that will spin up Trustee in the CLI process. The idea is that we will someday use this to attest a remote Trustee in coco. At the moment, I don't think anyone uses this. I guess we could only include certain verifiers for now, but probably best to revert imo.