feat: sign debian packages at build, update README