image: Add signing infrastructure