Update dev release instructions

- Pass the signing keyid to `git tag`.
- Use the `-u` flag instead of `-r` for `gpg -s`.
- Ignore the signature file in gitignore.