Clarify doc stub for gpg signatures

Just a note on the meaning of `<signature>`.