add signing script - stopgap until next release goes out with new sparkle