Get inventory-report public verification key

Returns NVIDIA’s currently-active public key for verifying signed inventory reports. Use with cosign verify-blob --key signing-key.pub --bundle <file>.sig.bundle <file>.csv. The key is PEM-encoded (PKIX SubjectPublicKeyInfo). After a key rotation this URL serves the new key; reports signed under previous keys cease to verify and customers must re-download.