only sign artifacts for release version and for "upload" task.