Add the release key's public certificate (signing/release-certificate.pem) and its SHA-256 to signing/README.md.