Feature
Package signing
Sign package versions with Ed25519 keys and verify them.
A signature envelope holds the Ed25519 signature, the key fingerprint and a timestamp. Org members register public signing keys with the registry; keys can be revoked.
`wl signing keygen` creates a key pair, `wl signing register` uploads the public key and `wl signing verify` checks a package version.