One key, or two?Launching sigillum, a standalone artefact signing and verification CLI, and the Rust signing problem that made it necessary.