REBASE put all relevant settings into a single properties file
compare-to-official-release: script to compare release jars

This allows anyone to test the reproducibility of the build.
remove jar signature from release, it messes up deterministic builds

No one really checks jar signatures anyway, there is a better OpenPGP .sig,
and the jar signature makes it harder to handle the determinstic build
process.
REBASE compare-to-official-release: script to compare release jars