sneak 778999a285 Add GPG signing support for manifest generation ...

- Add --sign-key flag and MFER_SIGN_KEY env var to gen and freshen commands
- Sign inner message multihash with GPG detached signature
- Include signer fingerprint and public key in outer wrapper
- Add comprehensive tests with temporary GPG keyring
- Increase test timeout to 10s for GPG key generation

2025-12-18 02:12:54 -08:00

2.1 KiB

Raw Blame History

View Raw