Initial release of the pinning-service-compliance tool. Service owners should be able to run the tool via npm/npx and debug any of their compliance issues once this milestone is complete.