See https://github.com/pgpainless/pgpainless/issues/428 for more background information
This commit introduces a dedicated SignatureHashAlgorithmPolicy for certification signatures. The default configuration will accept SHA-1 on sigs created before 2023-02-01.