Add a script to sign release artifacts