add signedpackage.sh helper script for jar signing