Make GPG signing artifacts optional