(CPR-8) Rake task for signing gems

This commit adds a sign_gem task into sign.rake that detached signs the
gem.
Do we really care about this check for signing? I know we have it in place for shipping, which makes sense. It's not necessarily a bad thing, by any means, and you're welcome to say we should just keep it.