adding release and publish instructions

@arschles Oops...had this wrong and you do need pgp, but you also need sonatype.sbt as well so we should list it.