Optional ReadonlydecryptionOptional ReadonlymimeMIME detection used when manifest.json must be auto-generated.
Defaults to the built-in extension table (mimeTypeForPath) with an
application/octet-stream fallback.
Optional ReadonlysignaturePEM override for signature verification (defaults to the embedded key).
Optional ReadonlyskipSkip §6a signature verification (verification runs whenever declared).
RSA private key PEM used to transparently decrypt §6b encrypted packages.