[llvm] [llvm][release] On release page, explain package types and verification (PR #138144)

[David Spickett via llvm-commits]

DavidSpickett wrote:

Just realised that some come with a `.sig`, but others have a `.jsonl`. Working out how to use those ones.

https://github.com/llvm/llvm-project/pull/138144