[cowbon]

Description

The NVIDIA scheme imports the legacy token library from the ratsd repository. Switch its production and test imports to github.com/veraison/ratsd-token, pinned to veraison/ratsd-token#1 from the standalone repository.

Update CMW to the library's required v0.3.0, normalize the Go directive to 1.26.0, and refresh module checksums. Keep github.com/veraison/ratsd/tokens for SEV-SNP's TSMReport, which is not provided by the standalone token repository.

Validation

• SEV-SNP tests pass.
• go test ./store-plugin/nvidia-coserv ./verification/api github.com/veraison/ratsd-token passes; the store plugin has no test files.
• go mod tidy -diff and git diff --check pass.
• NVIDIA tests cannot compile locally because the NVIDIA Attestation SDK header nvat.h is missing.

Checklist

• Code compiles correctly (NVIDIA compilation requires the missing SDK header)
• Created tests which fail without the change (if possible) (not applicable to this import and dependency migration)
• All tests passing (targeted checks pass; NVIDIA tests are blocked as described above)
• Extended the README / documentation, if necessary (not necessary)

[THS-on]

The