Do we actually want PURE2 to be pinned to a particular version of Uptane? <img width="974" alt="image" src="https://github.com/uptane/pures/assets/89217603/fbcb04e8-a29f-493b-82f2-b815d0c32ed2">