Sign prebuilt binary before publishing to NPM

[tec27]

Should be fairly straightforward to setup, I think signtool is already available on the Windows builder so it's mostly just a matter of getting our code signing cert through to it