feat(releasing): adding SHA512 and RSA signature validation script to verify releases

[rusackas]

SUMMARY

Validating releases to check SHA-512 checksum and RSA signature against the apache KEYS file is a bit... tedious.

This adds a python script to the RELEASING folder (and documentation about it) so you can just run the script and check if the release is valid.

Once releases contain this script, you can also run a bash script or npm script to validate the release from the scripts within.

BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

TESTING INSTRUCTIONS

ADDITIONAL INFORMATION

• Has associated issue:
• Required feature flags:
• Changes UI
• Includes DB Migration (follow approval process in SIP-59)
  • Migration is atomic, supports rollback & is backwards-compatible
  • Confirm DB migration upgrade and downgrade tested
  • Runtime estimates and downtime expectations provided
• Introduces new feature or API
• Removes existing feature or API

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (429e2a3) 66.99% compared to head (396d064) 69.11%.
Report is 7 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #26278      +/-   ##
==========================================
+ Coverage   66.99%   69.11%   +2.11%     
==========================================
  Files        1945     1946       +1     
  Lines       75949    76437     +488     
  Branches     8460     8707     +247     
==========================================
+ Hits        50885    52830    +1945     
+ Misses      22879    21392    -1487     
- Partials     2185     2215      +30     

Flag	Coverage Δ
hive	53.67% <ø> (?)
javascript	56.56% <ø> (+0.05%)	⬆️
mysql	78.08% <ø> (+0.02%)	⬆️
postgres	?
presto	53.63% <ø> (?)
python	82.79% <ø> (+4.46%)	⬆️
sqlite	76.84% <ø> (ø)
unit	55.79% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[michael-s-molina]

LGTM