Add package signing infrastructure