add gpg plugin for signing releases