re-worked release workflow, it is one-step and creates GPG signatures now