Troubleshooting

Symptom-first fixes for the sharp edges people actually hit.

• GPG signing — commits aren't signed, "no secret key", or pinentry/passphrase failures inside the cage.
• Mounting additional folders — where -v paths land in the cage, read-only mounts, and permission (EACCES/EROFS) errors.