Add docs on how to sign GA releases