gluon-autoupdater: update manifest.sample

We use SHA512 now. Also, added a comment explaining the ECDSA signatures.