Add gpg signing to release.sh