build: add script to sign packages