Payload and detached Ed25519 signature land together so main is never red between a catalog merge and its signature.