terakota — signed release binaries, checksums, provenance, install/verify docs, and secu…