Commit Signing (PGP) Add your public key, fingerprint, and verification steps here. Optional: publish /.well-known/openpgpkey/ if you want WKD.