where is the public GPG key signing releases?

[rbauduin]

It's great you sign the SH256SUM file published with releases on Github, but I didn't find the public GPG key published anywhere, meaning I can't verify the authenticity. It would be good to publish it to a location separated from Github. If it is already published somewhere, I missed it (which might be my fault....)