doc: Update SHA256SUMS.asc step in release-process.md

- The Hash: header is prepended by gpg, and states the hashing used by
  gpg, not what is used to hash the files

- Add more detailed steps