[Fedora-packaging] Using Minisign for source file verification