Implement PGP-signed releases in pipeline process

Hinging on #3 

See: https://github.com/gittip/www.gittip.com/issues/2030