Add maven-gpg-plugin to sign release artifacts