pub const TRUSTED_KEYS: &[TrustedKey];Expand description
Compile-time pinned keys. Operators add their own via HELDAR_REGISTRY_TRUSTED_KEYS.
NOTE: the bundled key below is the canonical Straits-AI registry signing key. Rotating it is a
kernel release (add a new entry with a fresh key_id); multiple pinned keys are all accepted, so a
rotation overlaps cleanly. The private half lives only in Straits-AI release infrastructure.