Enable ED25519 signatures

In order to publish verified runtimes and applications that can be checked using ED25519 keys, this commit adds the --sign and --sign-type command-line options with the same semantic as their flatpak and ostree counterparts:

• --sign must be followed by a base64-encoded secret key
• --sign-type indicates the signature type (default, and only valid value, is ed25519)