How to: Verify Docker image signature
The release workflow signs the container using [cosign](https://github.com/sigstore/cosign).
Validate the signature before deploying a new version:

```bash
cosign verify ghcr.io/montrealai/agi-insight-demo:latest
```
Successful verification proves the image came from this repository's CI.