A guided tour of the OCI image format: the manifest, the config JSON, content-addressed layers, and how a registry pull actually works.