implement signing of archives

all release archives are signed by default with the default key of the user
probably could use some improvements WRT specfiying which key to use etc

CCMAIL: release-team@kde.org
CCMAIL: jr@jriddell.org