Add a note about downloads and pgp verification to the readme

22 months ago, Gary Kramlich