Link to runbooks for info on signature creation
Was trying to get a handle on the package signature process, and felt it would be useful to cross reference runbooks on this, https://gitlab.com/gitlab-com/runbooks/blob/master/howto/manage-package-signing-keys.md
\cc @briann