The archlinux-keyring upgrade hook now signs the local keyring and aborts with 'There is no secret key available to sign with' when pacman-key --init never ran (fresh arch containers in the CI image build). Initialize the keyring, idempotently, before every pacman -Syu.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- add cross-distro dev-python installer script and wire it into role + Dockerfile
- regenerate dockerignore from gitignore on make build and ignore logs/
- harden sys-pip-install break-system-packages support probe
- raise project requires-python to >=3.11