fix(ci): add rpmmacros dump and explicit exit code capture for signing

Disable set -e around rpm --addsign to prevent silent exits and
capture the actual exit code and error output.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

script/publish-repo.sh

@@ -7,12 +7,23 @@ RPM_DIR="${1%/}"
 REMOTE_DIR="/var/www/rpm/fedora/${FEDORA_VERSION}/x86_64"
 
 # sign each rpm with the imported gpg key
+echo "--- rpmmacros ---"
+cat ~/.rpmmacros
+echo "--- macro check ---"
+rpm -E '%{_openpgp_sign_id}' || true
+rpm -E '%{_gpg_name}' || true
+echo "--- signing ---"
 for rpm in "${RPM_DIR}"/*.rpm; do
     echo "signing ${rpm}..."
-    rpm --addsign "${rpm}" 2>&1 || {
+    set +e
+    rpm --addsign "${rpm}" 2>&1
+    rc=$?
+    set -e
+    echo "exit code: ${rc}"
+    if [ "${rc}" -ne 0 ]; then
         echo "failed to sign ${rpm}" >&2
         exit 1
-    }
+    fi
 done
 
 install --directory --mode 700 ~/.ssh