fix/ci-openssl-linker
dev
gpg tries to open /dev/tty for passphrase input when no TTY is present in CI, causing the GCP key setup to fail. --batch suppresses interactive prompts and dearmoring doesn't require one anyway.