Multi-API bundles (ollama default / vllm / openai / anthropic), signed with the org signing key via the repaired sign workflow; .sig sidecars ship alongside from now on. Signed-off-by: flemming-it <sf@flemming.it>