fixup! fixup! fixup! fixup! chore(ci): add workflow to validate gpg/ folder content

Author: aduh95

.github/workflows/ci.yml

@@ -45,12 +45,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
         with:
-          fetch-depth: 2  # We need at least 2 to verify if the keyring has changed (so we can skip
-                          # the release signature verification if it hasn't).
-                          # The assumption is that we're either on a PR (in which case a depth of 2
-                          # gives us the merge commit + the tip of the base branch), or, for push
-                          # events, that it comes from a PR that was merged via a merge commit or
-                          # squashed into a single one.
+          fetch-depth: 0  # We need 0 to validate the git commit signatures.
           persist-credentials: false
       - name: Export pubring content
         run: |