[Security] Repository is vulnerable to MavenGate

[Nek-12]

https://blog.oversecured.com/Introducing-MavenGate-a-supply-chain-attack-method-for-Java-and-Android-applications/

Gradle task

./gradlew --write-verification-metadata pgp,sha256 --export-keys

did not find a pgp public key in a remote repository or the artifact is not signed.

      <component group="io.github.raamcosta.compose-destinations" name="animations-core" version="1.10.0">
         <artifact name="animations-core-1.10.0.aar">
            <sha256 value="e55aa2996e7dc9853e58782a2f7a98d430c1435fc45eb0aca67ee270ee24fafa" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
         </artifact>
         <artifact name="animations-core-1.10.0.module">
            <sha256 value="110f2b9e6c3e0375abf39a327d03033eca6dc9260df92c1de607954c35aa9256" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
         </artifact>
      </component>
      <component group="io.github.raamcosta.compose-destinations" name="codegen" version="1.10.0">
         <artifact name="codegen-1.10.0.jar">
            <sha256 value="5ce39af79b1842da62e75bbb7ea0c76066d4c2c62b25c0511b6c8b5fb2485bfa" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
         </artifact>
         <artifact name="codegen-1.10.0.module">
            <sha256 value="614a876da52db41a2413861099b5209824f7d6703a977fa7a9ab471e8c6e8198" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
         </artifact>
      </component>
      <component group="io.github.raamcosta.compose-destinations" name="core" version="1.10.0">
         <artifact name="core-1.10.0.aar">
            <sha256 value="2a094373aa4ab834bfcaa52482558a3738e35c00fa53173385de386dfcd3fc32" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
         </artifact>
         <artifact name="core-1.10.0.module">
            <sha256 value="2cd87329097f11a7c15c220f3fc72b3ff5f55f7026b88b452cd16f3a1d851560" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
         </artifact>
      </component>
      <component group="io.github.raamcosta.compose-destinations" name="ksp" version="1.10.0">
         <artifact name="ksp-1.10.0.jar">
            <sha256 value="b55250e6e6d2c634ad1d8199a6092b2abfa0c55360dac1d45ad5ec3aef6f2221" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
         </artifact>
         <artifact name="ksp-1.10.0.module">
            <sha256 value="a4d82650a2a9f64956f8d0f3a485c39e133278738f318f2d36074474e9f8055b" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
         </artifact>
      </component>

A fix is to:

1. Start signing all artifacts, if not signed yet
2. Upload a public pgp key used for signing artifacts to multiple public pgp repositories: https://keys.openpgp.org | https://pgp.mit.edu | https://keyserver.ubuntu.com/