keep the knot's repository signing keys in sops

move knot.starhaven.dev to the Rust knot