A package signing migration completes and one repo still warns

The repo is configured correctly, yet the automation keeps reporting a missing key because its validation hook uses the old path convention.