PGP Signature verification for downloaded APKs

[amiv1]

Would be really great to have automatic PGP signature verification as part of the install process as extra integrity check.

[Hoverth]

I'm not 100% sure how to do this, though there seems to be a go library that can help with this https://github.com/ProtonMail/gopenpgp#detached-and-inline-signatures, so I'll see what I can do.