* docs: add article covering asset signature verification
* Apply suggestions from code review
Co-authored-by: Matt Holt <mholt@users.noreply.github.com>
* add details around the need for artifact signature validation and the meaning of verification failure
Co-authored-by: Matt Holt <mholt@users.noreply.github.com>