List Signing Certificate Hash to Let Users Verify the Downloaded APK

### Your use case

#### What would you like to do?

Download the app using [Obtanium](https://github.com/ImranR98/Obtainium), and make sure that the app I install is indeed the correct one. To do so I use [AppVerifier](https://github.com/soupslurpr/AppVerifier).

#### Why would you like to do it?

To get rid of Google Play Store, and not rely on F-droid for its security issues (See https://privsec.dev/posts/android/f-droid-security-issues/ for more), while still making sure I get the original app signed by the developers.

#### How would you like to achieve it?

To be able to check whether the app downloaded is indeed from the developers I would need the hash of the signing certificate used to sign the app.

The hash would be listed preferably on an external site. Like the app's site, but it could also be listed on GitHub if the external site is not an option.

### Have you considered any alternatives?

_No response_

### Additional context

_No response_

### Are you willing to provide a PR?

No