signed tags show ssh signature in the release notes #164

should be a simple fix as far as i can tell:

• our present git for-each-ref command to get tags is defined here: https://tangled.org/@tangled.org/core/blob/master/knotserver/git/tag.go#L23
• this command fetches all contents, but if we specialize this to just contents:subject and contents:body, we can skip over the signature.

in addition, we can still extract contents:signature and pass it along to separately for the appview to apply signature verification and display a green tick perhaps!