Remote signing

How a validator operator moves the consensus key off the validator host into a remote signer, how CometBFT talks to that signer, and the rules that prevent a double sign.