pub fn validate_project_execution_trust( project_cfg: Option<&ConfigLayer>, repo_trust: &RepoTrust, ) -> Result<()>