OpenSSF silver badge

[szuecs]

According to https://www.bestpractices.dev/en/projects/2461/silver we are close to silver badge so we need only 2 things:

• signed release artifacts signed releases #2777
• threat model skipper documented threat model - OpenSSF silver #3816