contrib: add sign.sh