fix(*): Document using gpg detached signatures instead of DIGESTS

As of release 298 we generate .sig files which are much easier to deal
with than the oddball DIGESTS format.