For CentOS Stream 9 there is a script called sign_stream9_repodata.sh that signed the repodata.

That script is in a secure location.

Please create a sign_stream10_repodata.sh that allows us to sign the repodata for CentOS Stream 10.  Or even better, create sign_stream_repodata.sh that accepts a variable so we don't need a new one each Stream release.