fix/ci-openssl-linker
dev
The packages.cloud.google.com key format has changed and signature verification keeps failing in CI. trusted=yes bypasses the ceremony — we're downloading from a known Google URL so it's fine.