- Add scripts/security-txt.sh
to generate a security.txt file
- Add the current security.txt
- Extend verify.sh to verify security.txt by default
and cross-check that it expires together with the signing key
- Describe security.txt in OPENPGP.md and README.md
