Fix logging in tools/signing/do-all-signing

It seems do-all-signing does not log stderr from the different steps.

I think this is because of this line in do_step:

  $1 | tee "$steps_dir/$1.log" 2>&1

The 2>&1 should probably be before the pipe.