pom.xml: pgp-sign the artefacts for upload to Maven Central repository