sign artifacts during release