signing artifacts with gpg key of maoo@apache.org; first snapshot deployment done