Pin reviewer deployment image and signing keys

deploy/20-deployment.yaml

@@ -27,7 +27,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
         - name: agent
-          image: registry.a2acloud.io/agents/agent-reviewer:latest
+          image: registry.a2acloud.io/agents/agent-reviewer:32cab7f29fff3ac7bda0cbbc3cbda5309fe69ded
           imagePullPolicy: Always
           ports:
             - containerPort: 8000
@@ -43,6 +43,12 @@ spec:
             - name: A2A_GRANT_VERIFYING_KEY
               valueFrom:
                 secretKeyRef: {name: platform-secrets, key: grant_verifying_key}
+            - name: A2A_RECEIPT_SIGNING_KEY
+              valueFrom:
+                secretKeyRef: {name: platform-secrets, key: receipt_signing_key, optional: true}
+            - name: A2A_REPLAY_SIGNING_KEY
+              valueFrom:
+                secretKeyRef: {name: platform-secrets, key: replay_signing_key, optional: true}
             - name: A2A_GITEA_INTERNAL
               value: http://gitea-http.gitea.svc.cluster.local:3000
             - name: A2A_GITEA_PUBLIC