Maven: Perform GPG signing only when explicitly requested, re #3

Improved fix for GPG signing so I can turn it on explicitly when
releasing to Maven Central, but it stays turned off for the rest of the
time so it doesn't get in the way of everyone else.