debian_pipeline: Upload signed source packages if necessary

This turned out to be quite complex, and required changes in several other workflows to make sure that debian_pipeline reliably has all the information it needs, so it's probably best reviewed one commit at a time.

Fixes: #796 (closed)