more robust way to pass the password and readme update

Author: jcollie

README.md

@@ -1 +1,6 @@
 Build GObject bindings customized for Ghostty using zig-gobject.
+
+Release artifacts can be verified with the following command:
+```
+minisign -Vm <file> -P RWRRkKlFqo/pIbpNI7wwh0QyZq72qSteYnTXT9UOEDcl4Pbpf/xbjKWk
+```

release.nu

@@ -37,10 +37,10 @@ open $"($tmpdir)/($gir_tarfile)" | zstd -c | save --raw $"($tmpdir)/($gir_tarzst
 
 $env.MINISIGN_KEY | save $"($tmpdir)/minisign.key"
 
-$env.MINISIGN_PASSWORD | minisign -S -m $"($tmpdir)/($gobject_targzfile)" -s $"($tmpdir)/minisign.key"
-$env.MINISIGN_PASSWORD | minisign -S -m $"($tmpdir)/($gobject_tarzstdfile)" -s $"($tmpdir)/minisign.key"
-$env.MINISIGN_PASSWORD | minisign -S -m $"($tmpdir)/($gir_targzfile)" -s $"($tmpdir)/minisign.key"
-$env.MINISIGN_PASSWORD | minisign -S -m $"($tmpdir)/($gir_tarzstdfile)" -s $"($tmpdir)/minisign.key"
+$"($env.MINISIGN_PASSWORD | str trim)\n" | minisign -S -m $"($tmpdir)/($gobject_targzfile)" -s $"($tmpdir)/minisign.key"
+$"($env.MINISIGN_PASSWORD | str trim)\n" | minisign -S -m $"($tmpdir)/($gobject_tarzstdfile)" -s $"($tmpdir)/minisign.key"
+$"($env.MINISIGN_PASSWORD | str trim)\n" | minisign -S -m $"($tmpdir)/($gir_targzfile)" -s $"($tmpdir)/minisign.key"
+$"($env.MINISIGN_PASSWORD | str trim)\n" | minisign -S -m $"($tmpdir)/($gir_tarzstdfile)" -s $"($tmpdir)/minisign.key"
 
 (
   gh release create $version