(CPR-8) Rake task for signing gems

This commit adds a sign_gem task into sign.rake that detached signs the
gem.
Yes, `file` will already have the `.gem` suffix.