Add signature verification instructions to README