PGP signature on the SHA256SUM.asc file

There is no mention on the repository on how to verify the authenticity of the files released.
The last SHA256SUM.asc was signed by the PGP key 0xBD0F3062F87842410B06A0432F656B0610604482 from pgreco@blockstream.com.asc .
But there is no reference in the github to this key on how to verify the authenticity of the releases.
I suggest that the README.md could provide this info. Or since different releases can be signed by different people. That this info be provided in each release comments like in here https://github.com/ElementsProject/elements/releases/tag/elements-23.2.1