The following series adds libwaive, use it
for signify, and remove the TODO item.
I don't know if the test I did is sufficient to
ensure that the libwaive was used but the
following worked OK:
sha256sum -c --ignore-missing SHA256
signify -Cp ./openbsd-68-base.pub -x SHA256.sig miniroot68.img