chore(catalog): re-pin mif-docs to v0.3.1

[mif-catalog]

Automated, verify-first re-pin of an external plugin to its latest attested release.

Bump

• Plugin: mif-docs — source repo modeled-information-format/mif-docs-plugin
• ref: v0.1.2 → v0.3.1
• sha: 0f4d0b4b31ef → 9a39f0f2aa08d1e7267c7ec326e384e75348956c
• Release: https://github.com/modeled-information-format/mif-docs-plugin/releases/tag/v0.3.1 (published 2026-07-01T16:00:29Z)

Verified subject

• Artifact: mif-docs-plugin-v0.3.1.tar.gz
• Digest: sha256:7145058536306bd3d4c9d659e165c3d50e1fa25b4dd2635c9dad7dea380a6c35

Attestations

Predicate	Signer	Source repo	Verdict
https://slsa.dev/provenance/v1	repo:modeled-information-format/mif-docs-plugin	modeled-information-format/mif-docs-plugin	✅ verified

Only a release whose every required predicate verifies reaches this PR, so the
table above is all-green by construction.

Raw gh attestation verify evidence

https://slsa.dev/provenance/v1

predicate: https://slsa.dev/provenance/v1
signer:    https://github.com/modeled-information-format/mif-docs-plugin/.github/workflows/release.yml@refs/tags/v0.3.1
issuer:    https://token.actions.githubusercontent.com

Re-verify it yourself

gh attestation verify mif-docs-plugin-v0.3.1.tar.gz --repo modeled-information-format/mif-docs-plugin --predicate-type https://slsa.dev/provenance/v1 --format json

catalog-admission re-runs this verification fail-closed on this PR; the PR
auto-merges once admission + the required gates are green.