Initial commit

Bootstraps main so the real content can land as a normal PR against it,
rather than as the repo's own root commit.

Co-authored-by: bit <bit@das-labor.org>

.gitignore

@@ -0,0 +1,13 @@
+# Never a real artifact of this repo -- fixtures are generated in a temp dir
+# at test time (see test_*.py/.sh) specifically so nothing signed, keyed or
+# built ever ends up here to be committed by accident. Listed anyway as a
+# second line of defence: this repo is public.
+*.apk
+*.jks
+*.keystore
+*.p12
+*.idsig
+config.yml
+
+__pycache__/
+*.pyc