[release, feat] one PGP signature per release asset

[attila-lendvai]

Summary

currently the release contains a bee_1.18.2_checksums.txt, and a bee_1.18.2_checksums.txt.sig for the PGP signature.

please sign each release asset independently! i.e. each foo.deb file should have a foo.deb.asc, without going through a checksums.txt indirection.

Motivation

i'm working on packaging bee for Guix. i wrote helper scripts for the packages i'm managing and having a checksums indirection complicates things quite a lot.

also, from a dozen of crypto related packages, bee is the only one that does the checksums indirection.