In general, the GPL does not affect the output of a GPL-licensed program. From the GPL FAQ:
Is there some way that I can GPL the output people get from use of my program?For example, if my program is used to develop hardware designs, can I require that these designs must be free?
In general this is legally impossible; copyright law does not give you any say in the use of the output people make from their data using your program. If the user uses your program to enter or convert her own data, the copyright on the output belongs to her, not you. More generally, when a program translates its input into some other form, the copyright status of the output inherits that of the input it was generated from.
That is sufficient to show that the output of GnuPG is not automatically licensed under the GPL, so distributing such output within another work does not impose GPL requirements.
In your case, there is a further reason that a signature would not impose GPL requirements: I sincerely doubt that copyright law could ever recognize a cryptographic signature as a creative or derivative work. Cryptographic signing (which, as one of its steps, includes hashing) is a massively lossy transformation that completely destroys the original content of the work and is not designed to be reversed. As such, even if the GPL applied to the output of a GPL signing program (and again, it does not, per the FAQ item above), the output would not be eligible for copyright, so any copyright license such as the GPL would have no effect.
Finally, tivoization only applies if
- you are distributing a GPLv3-licensed program, and
- the program is intended to run on a specific hardware device, and
- the hardware of that device refuses to run an incorrectly signed executable.
As far as you've described your situation, absolutely none of those criteria apply to your case.
