signing-party: fix building from source

This commit fixes a number of issues with building signing-party from source:

  - upgrade tarball to 1.1.9, because version 1.1.8 has disappeared from the
    Debian repository (only versions part of a release are kept around).

  - add Moo as a resource; Perl 5.16’s version (1.0.5) is too old.

  - move Type::Tiny earlier in the resource list, because MooX::late needs it.
    Also upgrade its version, because the previous tarball has disappeared too.

---

P.S.: Do I need to do anything for the bottles?