add script to hard-link new released APKs into the fdroid repo
verify the sig on every APK, and make sure every APK has a sig

If an APK does not have a sig or the sig does not verify, then this script
will exit with an error.