[minor] move tempfile action signing into mig package