fn sign_archive( key_path: &Path, manifest: &[u8], payload: &[u8], ) -> Result<Vec<u8>, CliError>
Sign the framed manifest and payload digest.