(CPR-8) Rake task for signing gems

This commit adds a sign_gem task into sign.rake that detached signs the
gem.
Also, wont `file` already have the `.gem` suffix?