Make the jars signed and byte-for-byte reproducible. Closes #317879 and #317878 See merge request !269