Read Ironfang Finance report signing public keys

Operator-configured Ed25519 public keys only. Active keys sign new reports; retired keys verify old reports; revoked keys are refused. An empty list means no trust keys are configured. Cache lifetime is 300 seconds. Offline verifiers must obtain this document through an independently trusted channel and maintain revocation updates. Never trust a key supplied by a report.