mrom_sync.py: implement gpg signing
mrom_sync.py: pass 'extra' object from kernel config to manifest