Install Twig as a thirdparty submodule, checked out at v1.16.0 for now. This will, down the road, be replaced with a block that verifies a PGP signature (assuming Twig's devs implement this)