fix: upgrade to V1 msgpack attestation when v2 events present

Root cause of a live RTMR3-mismatch observed during v2 CVM testing:
`Attestation::into_versioned()` unconditionally wrapped as
`VersionedAttestation::V0`, which SCALE-encodes the payload. But
`RuntimeEvent::version` and `TdxEvent::version` carry `#[codec(skip)]`
(added for V0 binary compat), so the `version` field is dropped on
the wire. The KMS-side decoder then defaults each event to V1, replays
with the V1 digest algorithm, and fails against the guest's V2-extended
RTMR3.

Fix: when any runtime event reports a non-V1 version, force V1 msgpack
encoding (where `version` is a normal serde field and round-trips).
Callers with only V1 events still get V0/SCALE, preserving wire-format
compatibility with existing consumers.

`from_bytes` already detects the encoding by leading byte (msgpack map
prefix -> V1, else SCALE -> V0), so receivers don't need changes.

Verified end-to-end: deployed a CVM with `event_log_version: 2`, boot
now progresses past `get_app_key` without an RTMR3 mismatch; KMS
replay sees `version=V2` and matches the quoted RTMR3.

Author: kvinwang

dstack-attest/src/attestation.rs

@@ -12,9 +12,7 @@ pub const TDX_QUOTE_REPORT_DATA_RANGE: std::ops::Range<usize> = 568..632;
 use std::{borrow::Cow, time::SystemTime};
 
 use anyhow::{anyhow, bail, Context, Result};
-#[cfg(feature = "quote")]
-use cc_eventlog::EventLogVersion;
-use cc_eventlog::{RuntimeEvent, TdxEvent};
+use cc_eventlog::{EventLogVersion, RuntimeEvent, TdxEvent};
 use dcap_qvl::{
     quote::{EnclaveReport, Quote, Report, TDReport10, TDReport15},
     verify::VerifiedReport as TdxVerifiedReport,
@@ -1143,9 +1141,24 @@ impl Attestation {
         })
     }
 
-    /// Wrap into a versioned attestation for encoding
+    /// Wrap into a versioned attestation for encoding.
+    ///
+    /// When any runtime event uses a non-V1 event-log version, force the V1
+    /// msgpack wire format so the `version` field is preserved (SCALE
+    /// V0 skips it for legacy binary compat). Otherwise default to V0 for
+    /// backward compat with callers that expect the SCALE format.
     pub fn into_versioned(self) -> VersionedAttestation {
-        VersionedAttestation::V0 { attestation: self }
+        let has_v2 = self
+            .runtime_events
+            .iter()
+            .any(|e| !matches!(e.version, EventLogVersion::V1));
+        if has_v2 {
+            VersionedAttestation::V1 {
+                attestation: self.into(),
+            }
+        } else {
+            VersionedAttestation::V0 { attestation: self }
+        }
     }
 
     /// Verify the quote