feat(core): 钉入生产签名公钥（key_id ull-release）+ .gitignore 防私钥入库

2026-11-11 21:35:10 +08:00
1 parent c9eed39bd6
commit 68362e5408
@@ -60,6 +60,7 @@ pub(crate) struct PinnedKey {
 /// （`packaging/sign_manifest.py --check-pinned-keyring` 按标记解析这一段，标记变了它就找不到表）。
 pub(crate) const PRODUCTION: &[PinnedKey] = &[
    // >>> PINNED-KEYS >>>
+    PinnedKey { key_id: "ull-release", public_key_hex: "1c3687ecd656a29fda87a7afb56e07d2b9e223b62cf3a6f1a901fb499a97b122" },
    // <<< PINNED-KEYS <<<
 ];