Sign .changes files on the worker with a worker key
SHOULD: Implement signature of .changes on the worker with a worker key
- Requires to change the Sbuild task
This is a variant of #403 (closed), using a worker key rather than a central Debusine server key. There may not be much security advantage in going down this path, it's worth further discussion.