upgpkg: 0.6.0-1

• Add PGP signature validation to sources.
• Remove git commit hash injection (previously umoci --version would include this repo's commit hashes).
• Update to umoci 0.6.0.

Fixes #1

Signed-off-by: Aleksa Sarai cyphar@cyphar.com