moved signing plugin to sonatype profile