Commands / kosa8 mcp-policy sign

`kosa8 mcp-policy sign`

Sign an MCP policy with your org's ed25519 private key

kosa8 sign KEYFILE POLICY.json

Use the same key as kosa8 policy sign — one org signer covers both documents, so a machine that trusts one trusts the other.