Add ability to sign URL from App Engine service account

[dhermes]

Can use the App Identity API:

from google.appengine.api.app_identity import sign_blob
sign_blob(bytes_to_sign, deadline=deadline_seconds)