chore(build): 02-sign.yml uses incorrect gpg settings

Use a fpr match to lock a specific key

Signed-off-by: nopeitsnothing <no@anonymousplanet.net>

.github/workflows/02-sign.yml

@@ -128,9 +128,12 @@ jobs:
         run: |
           mkdir -p ~/.gnupg
           echo "$GPG_PRIVATE_KEY" | gpg --batch --quiet --import > /dev/null 2>&1 || true
+          FINGERPRINT=$(gpg --batch --list-secret-keys --with-colons 2>/dev/null \
+            | awk -F: '/^fpr/ { print $10; exit }')
           git config --global commit.gpgSign true
           git config --global gpg.program gpg
           git config --global gpg.exectimeout 180
+          git config --global user.signingkey "$FINGERPRINT"
           git config --global user.name  "github-actions[bot]"
           git config --global user.email "github-actions[bot]@users.noreply.github.com"