Add docs on how to sign GA releases

Is the (3) meant to mean Pulp 3.y.z?