(CPR-8) Rake task for signing gems

This commit adds a sign_gem task in gem.rake that unpacks, sets the
signing key and adds the cert to the chain for the spec file. These are
passed in by environment variables RUBY_PRIVATE and RUBY_PUBLIC
respectively. It then rebuilds it thus signing the ruby gems.
This shouldn't need a recursive rm.