Would it make sense to add a trusted-keys (could start with just @ryanofsky) and trusted-sha512-root-commit file like we do in Bitcoin Core?

The goal would be to make it easy to run the verify-commits script on this repo, ideally every time we update the subtree: https://github.com/bitcoin/bitcoin/tree/master/contrib/verify-commits