Use gittuf for operations

[patzielinski]

Since we have the Go backend now, we should try and use gittuf itself for repository operations, where possible.