Signed update service

This read-only endpoint distributes IronHeart update metadata and Tauri-signed installers. It is isolated from Postiz and does not host a dashboard or accept uploads.