force PGP checks of stable releases, closes #3105

- switch stable to use latest instead of branch
- add detection of available signatures
- enforce check when signatures available
- fix debug output missing newline