fix(ci): rpm sign

1. Signed rpm packages used to be overridden by unsigned
   ones due to the artifacts clash. This bug is fixed by
   specifying explicit stage dependencies.
2. Add stage for testing installed packages.