Switch manifest serialization to CBOR

Replace JSON-based bundle manifest with a CBOR-encoded format. The manifest
is now a canonical CBOR map with order-strict key decoding, raw 32-byte hash
payloads (instead of hex-encoded JSON), and compact binary representation.

tricu.cabal

@@ -37,11 +37,11 @@ executable tricu
     -fPIC
   build-depends:
     base >=4.7
-    , aeson
     , ansi-terminal
     , base16-bytestring
     , base64-bytestring
     , bytestring
+    , cborg
     , cmdargs
     , containers
     , cryptonite
@@ -90,11 +90,11 @@ test-suite tricu-tests
       ScopedTypeVariables
   build-depends:       
     base >=4.7
-    , aeson
     , ansi-terminal
     , base16-bytestring
     , base64-bytestring
     , bytestring
+    , cborg
     , cmdargs
     , containers
     , cryptonite
@@ -115,8 +115,8 @@ test-suite tricu-tests
     , text
     , time
     , transformers
-    , warp
     , wai
+    , warp
     , zlib
   default-language:    Haskell2010
   other-modules: