The signing secrets are now configured, so the job no longer needs to be switched off. It runs for v* tags and for a manual dispatch with signed_release set. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>