Log Message:
Implement inline package signature verification.

This replaces calling out to an external gpg command for verification
with inline verification using the security/netpgpverify library.

Bump version to 20150901.