Fix overwriting pdf after signing

- make explicit we're using static QFile func here
- QFile::rename doesn't work across filesystems, so instead
  create it alongside. Might fail if dir is not writeable
- can't use QSaveFile, since poppler sign() func wants a filename