Test signing metadata

The committed channel roots and registry.json are signed by Sigil's public, unlocked registry test keys. They are conspicuously non-production fixtures for the pre-ceremony workstream and must never be deployed to pkg.usesigil.org.