First cut at a clojars deploy tool that signs [IMMUTANT-274]

It still needs to be wired up to maven to call it, though we'd still
do that manually & locally after a release build.