package: allow specifying path to signtool.exe