Add signature file for source verification