Require GPG/PGP signing of the python release.

The Java package requires this already, I don't see why the Python can't.