Activate 'verify-signatures' by TRUE (upper case)

Do this so that Renovate does not attempt to update the file.
We do it manually if necessary.

Author: jjohannes

gradle/verification-metadata.xml

@@ -2,13 +2,17 @@
 <verification-metadata xmlns="https://schema.gradle.org/dependency-verification" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="https://schema.gradle.org/dependency-verification https://schema.gradle.org/dependency-verification/dependency-verification-1.3.xsd">
    <configuration>
       <verify-metadata>false</verify-metadata>
-      <verify-signatures>true</verify-signatures>
+      <!-- use 'TRUE' instead of 'true' so that Renovate ignores it: https://github.com/renovatebot/renovate/discussions/39029 -->
+      <verify-signatures>TRUE</verify-signatures>
       <keyring-format>armored</keyring-format>
       <key-servers enabled="false"/>
       <trusted-artifacts>
          <trust file=".*-javadoc[.]jar" regex="true"/>
          <trust file=".*-sources[.]jar" regex="true"/>
          <trust file="^gradle-\d+\.\d+(?:\.\d+)?(?:-(?:rc|milestone)-\d+)?-src\.zip$" regex="true"/>
+         <!-- explicitly trust unsigned artifacts -->
+         <trust file="asciidoctor-gradle-base-4.0.5.jar"/>
+         <trust file="asciidoctor-gradle-jvm-4.0.5.jar"/>
       </trusted-artifacts>
       <trusted-keys>
          <!-- BUILD: CONVENTIONS -->
@@ -144,15 +148,5 @@
       </trusted-keys>
    </configuration>
    <components>
-      <component group="org.asciidoctor" name="asciidoctor-gradle-base" version="4.0.5">
-         <artifact name="asciidoctor-gradle-base-4.0.5.jar">
-            <sha256 value="3b0a5c953c98977da3cec1bfd66c0f7438e3e07c06bda00abae8c53e4dd2185a" origin="Downloaded the file from https://plugins.gradle.org/m2/org/asciidoctor/asciidoctor-gradle-base/4.0.5 and generated the checksum locally" reason="Artifact is not signed"/>
-         </artifact>
-      </component>
-      <component group="org.asciidoctor" name="asciidoctor-gradle-jvm" version="4.0.5">
-         <artifact name="asciidoctor-gradle-jvm-4.0.5.jar">
-            <sha256 value="3e020e7f350cb6ff2658ff124ea63d42da3dacf6da3b71efe4c7670413369ce9" origin="Downloaded the file from https://plugins.gradle.org/m2/org/asciidoctor/asciidoctor-gradle-jvm/4.0.5 and generated the checksum locally" reason="Artifact is not signed"/>
-         </artifact>
-      </component>
    </components>
 </verification-metadata>