Maven artifact signing on CI for releases

Needs

```groovy
  plugins.withId('com.vanniktech.maven.publish') {
    signing {
      def signingKey = findProperty('signingKey')
      def signingPassword = ''
      useInMemoryPgpKeys(signingKey, signingPassword)
    }
  }
```

And a GPG key without a password added to secrets.