move maven-gpg-plugin bits to "sign" profile