Status report should require jrglasgow/c2patool 0.6.0
Problem/motivation
composer.json now requires jrglasgow/c2patool ^0.6.0, but the status report in c2pa_sign_requirements() still treats 0.5.3 as new enough. The two disagree.
Proposed resolution
Raise the library minimum in the status report from 0.5.3 to 0.6.0, so a site that ends up with an older library (for example a non-Composer install) sees the error.
AI Compliance
🤖 Generated with the help of an LLM, reviewed and approved by me before posting.