SignRepositoryIndex

# SignRepositoryIndex task

This is a signing task that signs a debian:repository-index artifact on a signing worker. It is separate from the Sign task to make it easier to add the signed indexes to the suite without needing additional helper tasks.

The `task_data` for this task may contain the following keys:

- `suite_collection` (Single lookup, required): the suite whose indexes should be signed

- `unsigned` (Single lookup, required): the debian:repository-index artifact whose contents should be signed

- `mode` (required): `detached` or `clear`

- `signed_name` (required): the file name to use in the output artifact

The task looks up the suite’s `signing_keys` field; if that is not set, it falls back to the `signing_keys` field of its containing archive, if any. It signs the unsigned artifact with all the signing keys corresponding to fingerprints in that list, creating a single signed output file.

The output will be provided as a debian:repository-index artifact, with `relates-to` relations to the unsigned artifact.