Package Signing

[jmariondev]

After looking at implementing the gnupg PyPI package, I realized it is licensed under the GPL 🤢.

Instead of trying to find an appropriately-licensed gpg binding package, I may just write bindings to OpenBSD's signify and use those instead. Our use case is aligned with theirs (we only need simple verification, nothing more) so they are a good candidate.

[jmariondev]

Signify in Python has been implemented: python-signify

I changed the docs to remove reference to GPG in f062484.