Add .sig to gngr.jar

[za3ter2p]

for security reasons better to add .sig file to check and verify the downloaded file

more info:

https://www.qubes-os.org/security/verifying-signatures/