docs: notes release signing, repositories, and signing key