All binary downloads should include instructions on how to verify the hash with gpg

We currently digitally sign all zowe.org artifacts with a GPG key, but only the convenience package download path provides users with the instructions on how to verify their package using the GPG key. We should clearly document how to do this for every package, either at the final download page like the convenience pax, or as a new topic in docs.zowe.org.