Divert to an installed gpg-authcode-sign.sh tool.

Doing this is easier than to touch our makefiles. The installed tool
has the advantages that it comes with a way to skip the signing step.