Update the main download page to bring it into line with ASF requirements: make the main download links go through a mirror script, and add links to PGP signatures and MD5/SHA1 hashes (on the main server).