[pkg] don't hardcode full path to sigcheck.exe

the installation path depends on how sigcheck was
installed, in case it is installed from choco its
put in another location

this assumes sigcheck.exe will be available on path