Signs or verifies a project artifact and attachments using jarsigner