Make the gpg signature file available through the official download.vscodium.com domain

[locture]

Currently the gpg key can only be accessed thru the gitlab page https://gitlab.com/paulcarroty/vscodium-deb-rpm-repo/.
While the rpm/deb packages have already been made accessible thru the more official CDN mirror download.vscodium.com, it will be more convenient and organized to keep a copy of the gpg key file under the mirror for better management and setup purpose.

[TzourCode]

Maybe a stupid question and don't belongs here. But i have this problem when i wan't to update VScodium. I did find out eventually and downloaded the GPG key through gitlab and added the key in apt source list. But when i update the system it still says that the Certificate verification failed and is not trusted. Should i just ignore and wait until they put the gpg key under the same mirror or should i bypass the SSL verification with (--insecure) command?
I have linux mint.