package update

// publicKeyPEM is the PEM-encoded Ed25519 public key that matches the
// SIGNING_KEY secret used by CI to sign release binaries. Generate a
// keypair once with:
//
//	openssl genpkey -algorithm ed25519 -out private.pem
//	openssl pkey -in private.pem -pubout -out public.pem
//
// Paste the contents of public.pem here and commit; store private.pem as
// the SIGNING_KEY repository secret. When empty, the updater refuses to
// update (e.g. development builds).
var publicKeyPEM = ""