Artifact signing step succeeds locally but fails in CI runners

The same signing command works on a developer machine but breaks in ephemeral runners because the key material and trust chain differ.