Download the OpenPGP signature for either the ISO image or the USB image

For simplicity, I'm assuming here that it's fine to then call it "the
image", without specifying "ISO" or "USB" for this audience.