Add gpg-signed SHA256SUMS