[#10] Signature declared but unverified is accepted at exec time

[utksh1]

plugins.py:241: when plugin.signature is set but plugin_signature_key is missing and enforcement is OFF, it logs a warning and returns True. A plugin carrying a signature but no key configured is executed without verification.

Fix: if a signature is present, require the key regardless of enforcement flag.

[utksh1]

Hey @deepsikha-dash, this issue matches your skills. Would you like to take it on? Comment below and I'll assign it to you once you accept the collaborator invite.

[NaitikVerma6776]

heyy @utksh1 , could u approve PR #1987 which is same what is needed to resolve in this issue

[deepsikha-dash]

Hi @utksh1, I would love to work on this issue. I accept the collaborator invite and would really appreciate it if you could assign this issue to me. Looking forward to contributing. Thank you.