Replace all jar-signing calls with a conditional macrodef

Takes care of checking whether jarsign.storepassfile and/or jarsign.tsa are set.
Don't set jarsign.tsa (timestamping disabled by default)
Merge pull request #2088 from manics/webstart_tsa_conditional

Webstart tsa conditional