add --sign option for build/deploy command to sign built RPMs
disabled GPG key sign related options
add some gpg related rountines