adding sign and verify targets to makefile

- sign generates hashes and gpg signature of the distribution file
- verify verifies the hashes and gpg signature
bumping VERSION to rc2