Write an RFC for the signstar project, which encompasses

• buying one or two NetHSMs
• implementing a signstar setup
• target the signing of repository sync databases as first step
• outline requirements for automatic package signing (dependent on build service)
• outline basic requirements for signed shim (secure boot)