pub fn bind_signer(dir: &Path, key: &[u8; 32]) -> Result<(), BridgeError>
Pin the importer key, or refuse a mismatch (SPEC-GIT-IMPORT §4).