Add versions to plugins that we explicitly reference.

Move GPG signing into a profile so that it only runs when making a release.