Update expired GPG signing keys

[joelanford]

Summary

• Update the GPG signing key files (pubring.auto and secring.auto.gpg) with renewed key expiration (2028-11-11)
• The previous key expired 2025-11-07, causing release signing to fail with gpg: skipped "A20B5C7E": Unusable secret key

Context

• Failed release run: https://github.com/operator-framework/helm-operator-plugins/actions/runs/25890614374/job/76092701208
• Key ID A20B5C7E was renewed locally and re-exported

[grokspawn]

Would it be considered a breaking change if we stopped signing these releases?
Can we perpetuate the key signing process in a way that survives maintainer drift?

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.71%. Comparing base (08ab7fb) to head (228dfbd).
⚠️ Report is 150 commits behind head on main.

❗ There is a different number of reports uploaded between BASE (08ab7fb) and HEAD (228dfbd). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (08ab7fb)	HEAD (228dfbd)
	2	1

Additional details and impacted files

@@             Coverage Diff             @@
##             main     #533       +/-   ##
===========================================
- Coverage   85.06%   74.71%   -10.35%     
===========================================
  Files          19       31       +12     
  Lines        1346     2037      +691     
===========================================
+ Hits         1145     1522      +377     
- Misses        125      433      +308     
- Partials       76       82        +6     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[joelanford]

Would it be considered a breaking change if we stopped signing these releases?

Debatable, but not great to stop signing.

Can we perpetuate the key signing process in a way that survives maintainer drift?

Only if we somehow automate renewing the key or removing the expiration date?