Add upstream-signing-key.pgp to debian/source/include-binaries