Replace all jar-signing calls with a conditional macrodef

Takes care of checking whether jarsign.storepassfile and/or jarsign.tsa are set.
Don't set jarsign.tsa (timestamping disabled by default)