pub fn sign_bytes(
key: &SigningKey,
kid: &str,
bytes: &[u8],
) -> Result<String, String>Expand description
Sign raw bytes: the sidecar body for <file>.sig. The key id is
validated first — raw interpolation into TOML would otherwise
admit injection via quotes, escapes, or newlines.