host maintainers' PGP keys and link to them in the Installation guide
the releases are signed, but it's very hard to verify the signatures (I couldn't) because the relevant keys are not available. I could find shreyasminocha's key on their website but that's not the key used for signing the latest AppImage release. others have had this problem too here and here.
please host the relevant keys in this repository and link to them in the installation docs and in keys.md.