Allow to pass sign to scc tag-release

This PR should allow to tag a release using annotated GPG-sign tags, i.e. the following should ask for a passphrase assuming you have a private key:

```
$ scc tag-release -s VERSION
```

The tag-release integration tests should be unchanged and still passing with this PR merged.