(CPR-8) Rake task for signing gems

This commit adds a sign_gem task into sign.rake that detached signs the
gem.
I wanted to make sure that was intentional. Keeping the gems and tarballs in the same place for now sounds sane to me. And thanks for explaining to me why we use variables. I'm so very glad I have that knowledge now.