chore(signing-utils): add ssh2 types and don't override file with gpg signing

[baileympearson]

Two misc fixes:

• @types/ssh2 is now a prod dependency. I thought this was already the case, but apparently not.

• with gpg signing, we don't override the original file when signing remotely. This isn't necessary because gpg doesn't sign in place, and was causing issues in Mongosh's CI.

  Semantic Versioning:

  Package versions will be bumped automatically according to the PR title:

  • The words BREAKING CHANGE in the title will cause a major bump to all the packages changed in the PR. All dependants will also have a major bump (dependencies, optionalDependencies, peerDependencies) or a patch bump (devDependencies).
  • A subject starting with feat will cause a minor bump to all the packages changed in the PR. All dependants will also have a minor bump (dependencies, optionalDependencies, peerDependencies) or a patch bump (devDependencies).
  • Any other change to any package will cause a patch bump to the package and all its dependants.
    -->

Description

Open Questions

Checklist

• I have signed the Contributor License Agreement (https://www.mongodb.com/legal/contributor-agreement)
• New tests and/or benchmarks are included
• Documentation is changed or added