bump gpg plugin version to 0.8 such that publish-local does not required GPG password (enable mechanical build). Use publish-signed and publish-local-signed when the package must be signed (see https://github.com/sbt/sbt-pgp)