Update CHANGELOG with notes on default gem signing