adding gpg plugin for signing maven artifacts