use gpg env variable for signing

Signed-off-by: Alfredo Deza <alfredo@deza.pe>