core: Add rpm-ostree-sign

This uses rpm-sign which talks to a remote server for signing.