gitlab Feb 24, 2026 GPG key used to sign GitLab package repositories' metadata has been extended (opens in new tab) gitlabdevsecopsgpgsecurity-policiespackage-repositoriesmetadata-signing