Enforce digital signing of software binaries and container images. Use when building, releasing, or reviewing CI/CD pipelines for AI software, MCP servers, or any distributed components.
