verifyQStashSignature returns false instead of true when signing keys are not configured, silently breaking all self-hosted bot (Feishu/WeChat) replies #13609