Update installation.rst

Refer to PGP signature verification in the installation instructions for tarballs.