Meh... case
Upload the signed package

Turns out that we were uploading the sig header, but not writing the
signed package.

This caused all sorts of problems. :(
Add a new script to re-sign existing packages

New packages were signed thanks to our Koji plugin, but that left
existing packages unsigned.

With this script, we can fix that.