Some (intertwined) questions from this discussion:
- Is it OK to publish release artifacts signed by the Konflux key?
- Should we block switching to building via Konflux on the artifacts being signed by Fedora’s key?
- Should we require that only for full Fedora editions? (i.e. that would apply to Fedora CoreOS right now but not Fedora bootc images which AFAIK are not yet considered an official edition)