The TOML rubixd sign produced — package metadata plus a
[publish] block with the signature. The page refuses a bare
package TOML with no signature block.
The binary the envelope signs (ELF, docker-archive tarball, …). The same
bytes rubixd sign hashed.