Teach the m2 enforcer to sig check zip files

GEN-330: Build Windows installers in our standard flowClosedPreview describes why.

This should probably be done under configuration so if it goes pear-shaped we can fix it in the project parent without shipping another enforcer