adding gpg signing to release process
bringing POM into conformance with sonatype standards