Reject the exact config.example.yml placeholder in validate() with an error naming signing_key, so a container or file-based deployment that never changed it fails fast instead of signing URLs with a public key. The signing-key checks move into a validateSigningKey helper, keeping validate() within the cyclomatic-complexity limit. Model: opus-4-8