switch to signed git tag

This builds libpsl from a PGP-verified git tag.

I asked upstream to consider detached signatures for the tarballs too, but haven't received any response.

Merge request reports

Loading