CA-144941: Don't checksum the gpg binary

We are already checking the signature of the patch contents, it seems silly to
also checksum the gpg binary itself. It's also becoming a bit of a maintenance
burden and cumbersome in the open source world where this checksum will be
different on every version of every distro.

Signed-off-by: Si Beaumont <simon.beaumont@citrix.com>