Publish it with a key owned by the nostr.build service specifically for these matters and tell clients what that key is so they can trust it.
Discussion
I’ll propose a PR to add trusted npub in the nip96 JSON. Probably a list of them, to allow rotation, etc