> * defining a signing and repository update workflow, adding as little burden as possible I forgot to mention that it should stay easy to host repositories for third-parties.