utils: rosenthal-transformation-guix: Update signing keys.

Forgot to add the new one here...
See also <https://codeberg.org/hako/Testament/issues/20>.

* modules/rosenthal/utils/transformations.scm (rosenthal-transformation-guix):
Add new signing key of Guix Moe build farm.

modules/rosenthal/examples/niri.kdl

@@ -381,11 +381,19 @@ binds {
     // Example volume keys mappings for PipeWire & WirePlumber.
     // The allow-when-locked=true property makes them work even when the session is locked.
     // Using spawn-sh allows to pass multiple arguments together with the command.
-    XF86AudioRaiseVolume allow-when-locked=true { spawn-sh "wpctl set-volume @DEFAULT_AUDIO_SINK@ 0.1+"; }
+    // "-l 1.0" limits the volume to 100%.
+    XF86AudioRaiseVolume allow-when-locked=true { spawn-sh "wpctl set-volume @DEFAULT_AUDIO_SINK@ 0.1+ -l 1.0"; }
     XF86AudioLowerVolume allow-when-locked=true { spawn-sh "wpctl set-volume @DEFAULT_AUDIO_SINK@ 0.1-"; }
     XF86AudioMute        allow-when-locked=true { spawn-sh "wpctl set-mute @DEFAULT_AUDIO_SINK@ toggle"; }
     XF86AudioMicMute     allow-when-locked=true { spawn-sh "wpctl set-mute @DEFAULT_AUDIO_SOURCE@ toggle"; }
 
+    // Example media keys mapping using playerctl.
+    // This will work with any MPRIS-enabled media player.
+    XF86AudioPlay        allow-when-locked=true { spawn-sh "playerctl play-pause"; }
+    XF86AudioStop        allow-when-locked=true { spawn-sh "playerctl stop"; }
+    XF86AudioPrev        allow-when-locked=true { spawn-sh "playerctl previous"; }
+    XF86AudioNext        allow-when-locked=true { spawn-sh "playerctl next"; }
+
     // Example brightness key mappings for light.
     // You can use regular spawn with multiple arguments too (to avoid going through "sh"),
     // but you need to manually put each argument in separate "" quotes.

modules/rosenthal/packages/emacs-xyz.scm

@@ -57,25 +57,6 @@ editing Caddyfiles, configuration files for @code{caddy}.")
                  "14d6nvagcri0r687y3m179ijmnad89m5d5dj2rn2p6rpfc5nssr0"))))))
     (name "emacs-eat-dolly")))
 
-(define-public emacs-nftables-mode
-  (package
-    (name "emacs-nftables-mode")
-    (version "1.1")
-    (source
-     (origin
-       (method url-fetch)
-       (uri (string-append "https://elpa.gnu.org/packages/nftables-mode-"
-                           version ".tar"))
-       (sha256
-        (base32 "1wjw6n60kj84j8gj62mr6s97xd0aqvr4v7npyxwmhckw9z13xcqv"))))
-    (build-system emacs-build-system)
-    (home-page "https://elpa.gnu.org/packages/nftables-mode.html")
-    (synopsis "Major mode for editing nftables scripts")
-    (description
-     "@code{nftables-mode} is an Emacs major mode for editing nftables scripts.
-It currently only offers basic highlighting and primitive indentation.")
-    (license license:gpl3+)))
-
 (define-public emacs-pcmpl-tailscale
   (let ((commit "acd6bce54af506b0450cf6aa1068f63d4e25c8ce")
         (revision "0"))

modules/rosenthal/utils/transformations.scm

@@ -20,12 +20,11 @@
 (define* (rosenthal-transformation-guix #:key (substitutes? #t)
                                         (channel? #t)
                                         (guix-source? #f))
-  (define %rosenthal-signing-key
-    (plain-file "rosenthal.pub" "
-(public-key
- (ecc
-  (curve Ed25519)
-  (q #374EC58F5F2EC0412431723AF2D527AD626B049D657B5633AAAEBC694F3E33F9#)))"))
+  (define %rosenthal-signing-keys
+    (list (plain-file "gokuraku.pub"
+            "(public-key (ecc (curve Ed25519) (q #374EC58F5F2EC0412431723AF2D527AD626B049D657B5633AAAEBC694F3E33F9#)))")
+          (plain-file "nuporta.pub"
+            "(public-key (ecc (curve Ed25519) (q #552F670D5005D7EB6ACF05284A1066E52156B51D75DE3EBD3030CD046675D543#)))")))
 
   (define %rosenthal-channel
     (channel
@@ -44,10 +43,8 @@
       (services
        (cons* (simple-service 'guix-moe guix-service-type
                 (guix-extension
-                  (authorized-keys
-                   (list %rosenthal-signing-key))
-                  (substitute-urls
-                   '("https://cache-cdn.guix.moe"))))
+                  (authorized-keys %rosenthal-signing-keys)
+                  (substitute-urls '("https://cache-cdn.guix.moe"))))
 
               (modify-services (operating-system-user-services os)
                 (guix-service-type