When adding an annotation whose value contains = characters (e.g. a URL with query parameters), the CLI rejects it with:

ERR invalid annotation "url=https://sonarcloud.io/dashboard?id=....", the format must be key=value

Example:

chainloop att add --name sonar-url --value ${SONAR_URL} --annotation "url=${SONAR_URL}" --attestation-id $(ATTESTATION_ID)
# where SONAR_URL=https://sonarcloud.io/dashboard?id=test.mig

The annotation parser should only split on the first = sign, treating everything after it as the value.