- removed duplicate content
- clarified what is signed and since which release
- updated verification sample output (also in wiki) using the output of 1969811205 (step):7:156
- Corrected release process - we trigger the release on the push of the tag, not a branch (fixed point in time instead of a moving target)
This documents/should document:
* what the signatures are and what they proof
* how to verify them
* how to build releases (I know more of a maintainer doc, but yeah, I found it a good place here, if you want a separate one feel free)
This should also make it easier for other maintainers to create releases or so.
@elrido feel free to adjust/push to the branch if you want to have some details fixed. I have left some TODOs of stuff where I am unsure.