feat: add support for signing-key passphrase management in environment files