Check gpg signature in debian/watch