Use HmacSHA256 for code signatures