migrate to maintained httpsig lib

[6543]

No description provided.

[6543]

we might wait untill woodpecker-ci/woodpecker#2218 do pass :)

[anbraten]

I think we used the go-fed before migrating towards go-ap. I think it had some issues. Not sure if we could call the go-fed/httpsig maintained 🤔

[6543]

hmm well it's not archived and in active usage e.g. gitea use it :D

that there is no much action is fine ... souch libs with narrow scope are completed at some point and dont have to update code anymroe.

what worries me is that there are open issues and open pulls (some from us) with no much action on them ...