the current scheme recommends signing the *fingerprint* of the pgp key, which doesn't tie into the nostr identity
this commit temporarily undos the commit adding pgp identities until a proper fixed version is merged
just signing the npub string also would not be sufficient, and the message should indicate this is for identity verification
ideally, a link to download key material would also be included
