Operationalizing Software Trust: Why OpenChain Matters!