build.gradle: add GPG signing

And unlike Maven, it is non interactive!