[build] add target for signing packages

``make sign`` builds a CTAN package and signs it with GnuPG.