scripts: add extract-cert and sign-file to .gitignore