root/pypi: links for trust-sign