PGP signature verification for pre-built binaries

[o-alquimista]

I'd like to suggest signing the binaries so we can verify them with your PGP public key.

A checksum file would also be nice to have.

Thanks!