Core upload update signing

This should make signing an update fully automated. The additional step that is new here is that it injects the signing public key into the root filesystem.