What an artifact signature proves, and what it does not

Signing the JAR and the image, restricting who can sign, and being honest about the gap between a signature and real provenance.