example: GPG sign CMake / CPack

I made a minimal CMake example project for signing CMake-built project binaries as well as signing CPack source and binary packages: