G22c public URLs, G10-3b per-tenant keys, C2PA signing, and branch review fixes