add grub signing guide

[thebigbone]

To prevent an attacker from tampering with GRUB, you can sign all the GRUB files. More info: https://www.gnu.org/software/grub/manual/grub/html_node/Using-digital-signatures.html