Add upstream signing key and signature URLs in debian/watch