checksum & PGP signing 

Would be nice to make it easy to create a checksum and sign it with user's sourced PGP key. 

GoReleaser can be a nice starting point https://github.com/goreleaser/goreleaser-action#signing to take inspiration from 