Sign content

PoC: your file never leaves your device. We store only a signed manifest + hash.