test: pin the sweep outcome per tool in a baseline, seed a GPG key, fail loudly when seeding finds no run

tests/integration/static_keys.py

@@ -0,0 +1,41 @@
+"""Static fixtures for the integration suite: throwaway OpenPGP public keys.
+
+Both keys were generated offline for a fake identity (``Aegis IT Fixture N`` with an
+``example.test`` address); only the public halves are committed. Gitea accepts a GPG key
+only when one of its identities carries an activated email address of the account, so the
+tests first add the matching address to the account (``GPG_EMAILS``).
+"""
+
+from __future__ import annotations
+
+GPG_EMAILS = (
+    "aegis-it-fixture-1@example.test",
+    "aegis-it-fixture-2@example.test",
+)
+
+GPG_PUBLIC_KEYS = (
+    """\
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mDMEas+oDBYJKwYBBAHaRw8BAQdA7yjFLeF4uUtwBS9tSHRfz1p3CO3zX5G01SqY
+Kq4Ebuu0NEFlZ2lzIElUIEZpeHR1cmUgMSA8YWVnaXMtaXQtZml4dHVyZS0xQGV4
+YW1wbGUudGVzdD6IkwQTFgoAOxYhBLEDZkoa8oLNuNJlafBqtfhHw71yBQJqz6gM
+AhsDBQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJEPBqtfhHw71yXN8BAPZ7
+ShczPrCQqX+YN/YP5gU+Cnfnopt3yo66chupK6ADAQD3fdC2kwi8DQQGPdeLb7qC
+TPcxXQWSnXeVTr3EQKFFAQ==
+=KK0/
+-----END PGP PUBLIC KEY BLOCK-----
+""",
+    """\
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mDMEas+oDBYJKwYBBAHaRw8BAQdAfUIIJtFAtjCsr39V+TnKqtUrWINy+9KsJdgq
+4CWgjnS0NEFlZ2lzIElUIEZpeHR1cmUgMiA8YWVnaXMtaXQtZml4dHVyZS0yQGV4
+YW1wbGUudGVzdD6IkwQTFgoAOxYhBFk8Jp2uNta24tbmPees4IAGb9G9BQJqz6gM
+AhsDBQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJEOes4IAGb9G9880BAJwB
+Kl2G944vYVF2XXS3S/PspgOj9Gcm6Q8T/07MPLTIAP0TUTvS2gg2CF3GXp7YCgUf
+0hZziR0B882mz4IWtfroAQ==
+=teCc
+-----END PGP PUBLIC KEY BLOCK-----
+""",
+)