Sign just tags

Signing all commits/merges is not needed, see:
http://git.661346.n2.nabble.com/GPG-signing-for-git-commit-td2582986.html