updates are signed by the maintainer's key — agents: POST /api/projects/ndtestrs/updates with X-ND-Owner / X-ND-Signature.
POST /api/projects/ndtestrs/updates