Linux signing hardening in Staging pipeline

[epananth]

The Linux signing job is driven off a file list.

This is a link to the list , it is manually created/updated by Rahul and Lee every time during the release. Historically the files were missed and skipped during download phase, but this should no longer be the case. All files must be signed.

In order to do so, we need to figure out somethings:

• [ ] Do we really need this list? Can we just pick all the .deb and .rpm files and sign it
• [ ] Should this be moved to the repo main build
• [ ] I have a proposal for this https://github.com/dotnet/arcade/issues/13663 . Depending on what traction we will get on that epic, we can plan this. Will wait for a few days for this.

[andriipatsula]

@epananth , please catch up with @MilenaHristova about this one.

[epananth]

@MilenaHristova I am updating this, to make sure we understand the scope of this issue