build(manager/electron): 👷 add option to use GCP KMS for signing

[jyyi1]

In this changeset:

• upgraded jsign.jar to version 4.2
• add an option to leverage gcp-hsm certificate to sign Windows executables
• Remove SHA1 signature from the Windows executable because:
  1. SHA-1 is deprecated by Microsoft
  2. SHA-1 is not supported by GCP HSM based certificates
  3. The only affected OSes are Windows 7 and below (support ended already). Windows 7 (6.1.7600) users can still upgrade to Windows 7 SP1 (6.1.7601) which supports SHA-2.
  4. Users can still run our app on old Windows systems (Windows 7), despite that the following warning dialog might show up: