Provide a gpg signature of binaries

[sapk]

To certify the build come from drone.

Related #4167

[sapk]

If fact not really, the previous issue talk only about gitea.io where github releases should also be signed.

[tboerger]

The signatures will be uploaded to the GitHub releases and to the download server as well.