Fleet does support user authentication for OCI based registries - as described in the "Private Helm Repo" box under
https://fleet.rancher.io/gitrepo-structure/ .
Verification of signatures is not implemented and not planned at the moment to my knowledge.