repo-drop: make & check gpg signatures
thrice means 2 retries, not 3
repo-drop: allow overwriting existing package (i.e. prompt before bailing)
repo-drop: sync signature with repo
- upload/replace remote when exists locally
- delete remote when doesn't exist locally
- delete local sig when deleting local package
repo-drop: when overwriting package, don't delete the new one