added current upstream signing key
Tar-ignore .gitignore Fixed control with cme fix Added upstream signing-key and use it in watch file