tests: always initialise "ret".

This gets rid of some warnings from Clang.
libsign: add a .gitignore file.
libsign: remove nettle dependency.

Since we used very little of Nettle in order to check the signatures
that we need to check, I reimplemented just the bits that we need to
avoid this dependency.