Function sign 

pub fn sign(
    pkg: &Path,
    name: &str,
    version: &str,
    providers: Vec<String>,
    secret_hex: &str,
) -> Result<String, String>

Publisher side: write plugin.json for the files in pkg and sign it. secret_hex is the 32-byte Ed25519 seed (hex); it is never printed.