Check binary signature on opam binary

[ajbt200128]

Opam publishes signatures for all their binaries: https://github.com/ocaml/opam/releases, it would be nice if setup-ocaml checked them when downloading!

[smorimoto]

Currently working to enable that. By the way, in this repository we recently enabled immutable releases and made all releases immutable using ghir.