`ostree-repo-pull.c` is huge; separate some of the GPG/signing verification functions into their own file so they're more easily seen.
`ostree-repo-pull.c` is huge; separate some of the GPG/signing verification functions into their own file so they're more easily seen.