I created a browser extension to solve just that: https://github.com/tasn/webext-signed-pages/
It lets devs PGP sign their web apps and verifies those signatures. We use it for the EteSync (https://www.EteSync.com) web client.