script: Use a passphrase file when signing deb packages

gpg-agent didn't seem to work when running `script/release-packages` unattended.