Add ExternalDebsign task

The actual work will be done in an API view that doesn't exist yet, but this at least gives us the basic task model.

Part of #364 (closed).