pub fn sign_manifest(
manifest_path: &Path,
signing_key: &str,
dry_run: bool,
) -> Result<Vec<u8>>Expand description
Sign the manifest at manifest_path with the publisher’s key,
returning the detached ASCII-armored signature bytes.
signing_key is passed to gpg --local-user. It may be a key-id,
fingerprint, or path to a key file that gpg knows how to resolve.
When dry_run is true, returns a placeholder signature string
without invoking gpg or touching disk.