Publish the app-signing certificate and its fingerprint

New Verify section: byteapps.crt download, the publisher fingerprint
(SHA-256 of the compressed secp256k1 pubkey), and the openssl one-liner
to reproduce it before trusting the cert on a Passport Prime.

Author: ObjSal

byteapps.crt

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

index.html

@@ -141,6 +141,17 @@ <h2>Open source</h2>
     </div>
   </section>
 
+  <section id="verify">
+    <h2>Verify our apps</h2>
+    <p>Passport&nbsp;Prime apps from ByteApps are signed with our publisher
+    certificate — <a href="byteapps.crt" download>byteapps.crt</a>. Before
+    trusting it on your device (Settings &gt; Apps &gt; Allowed Publishers),
+    check that its fingerprint matches:</p>
+    <p><code style="display:block;overflow-wrap:anywhere;background:var(--bg-card);border:1px solid var(--border);border-radius:var(--radius);padding:12px 16px;font-size:14px">1bca27c8e765a77fd44922bc058b815b46e627d68f2996e8c38ca6997b6be6f9</code></p>
+    <p><small>Reproduce it yourself — SHA-256 of the certificate's compressed public key:<br>
+    <code style="overflow-wrap:anywhere">openssl x509 -in byteapps.crt -pubkey -noout | openssl ec -pubin -conv_form compressed -outform DER | tail -c 33 | shasum -a 256</code></small></p>
+  </section>
+
   <section id="contact">
     <h2>Contact</h2>
     <p>ByteApps LLC · Denver, Colorado<br>