* security: verify JoininBox updates before install
* feat: restore PR testing behind explicit consent warning
Address review: instead of hard-refusing PR installs, keep the JBPR
menu functional but gate it behind a typed confirmation
('test PR <number>') with a prominent security warning about
unverified, unsigned code running with elevated privileges.
Signature verification remains enforced for tag and commit updates.
* fix(security): accept primary key fpr in VALIDSIG for subkey-signed tags
AdamISZ signs JoinMarket tags (e.g. v0.9.12) with a signing subkey, so
GnuPG's VALIDSIG record starts with the subkey fingerprint and carries
the pinned primary fingerprint as its last field. The strict prefix
match rejected valid signatures and failed the amd64 image build.
Match the pinned fingerprint either as the signing key or as the
primary key (last field). GnuPG only emits VALIDSIG after validating
the signature and subkey binding, so both positions authenticate the
pinned key.
* test: cover verified JoininBox update paths
* fix: validate JoininBox PR numbers before fetch
---------
Co-authored-by: autoblitzbot <autoblitzbot@users.noreply.github.com>
* refactor install to add new user
* add option to test a joininbox pr
* reorder vars and update FAQ
* record the qtgui entry and prepare ${user}
* check entry after the user is created
as suggested in: https://github.com/openoms/joininbox/issues/28
the main menu "Exit" button now drops to the command line
the separate "Exit to the Command Line" option is removed
Submenus use the label "Back" inplace of "Cancel"
