Bouncycastle was moved to signing package

As the only bouncycastle-dependent class is Mobileprovision – it's more logical to put them into the same place.
It's still unclear why it's not possible to use bouncycastle from Jenkins.