Add docs on how to sign GA releases

For those unfamiliar with our versioning, (3.y.z, 4.y.z, etc) might be more clear.