Complete guide to setting up a modern PGP workflow with YubiKey: offline primary key, subkeys, backups, and Git commit signing