add timestamping authority server option for Android

This adds an option for specifying a TSA URL which will timestamp Android APK exports when signing with jarsigner. Tested with http://tsa.safecreative.org/ as an example on OpenJDK7 jarsigner on Debian Jessie.