It turns out that there's another way to sign kernel images, which
uses detached files with the .sig extension.  We need to ignore these
when making a list of installed versions.

Closes: #906873