build: sign packages & don't force arch