Makefile: tag release after signing the tarball