Consider adding some scripting, etc. to make sure that the key used to sign a release is listed in README.md

[haqer1]

To avoid an issue like the one mentioned in #32559.

P.S. #32559 is about a specific key. This is one is about scripting, etc. to make sure this is avoided going forward.