package: correct args for Windows signing