(#15708) checks against env variables for signing

enables checks against env variables for signing the package and the
developer ID to use. defaults to no signing and puppetlabs ID if used
(if machine does not have correspending certificates, it will generate
an unsigned package).

previous behavior had hard coded values that couldn't be overriden with
ENV.