fix: get the windows code signing key file from the env

* Get the Windows Signing Key from the env var
* Add notes on how to convert a cert and key for use with the MS signtool