Use gcrypt: prefix for info messages
Match just the manifest lines that start with sha-1 for the refs
Allow signing of the manifest file, and verifying signatures
No default cipher-algo(!) use gpg' user's settings!
Update README
Use SHA-224 for pack file ID (REPO FORMAT CHANGE)