fix #8 add release profile

Don't verify artifacts using gpg on default.