pub fn c2pa_signer() -> Result<Arc<dyn Signer>>
Loads the C2PA signer; falls back to the trust signer when none is configured.