Limit pgp signature to the publish process to prevent breaking CI