dropped dependency on Sonatype parent.

this complicated release:prepare by forcing GPG signing, which we currently don't need to do.