Sign artifacts as part of the release process

When using sbt-pgp and sbt 0.13.0 artifacts are not signed by default (see https://github.com/sbt/sbt-release/issues/49). This signs them as expected.