Vatican, China sign deal over bishops, allowing Pope a veto