release.py: sign tags when cutting releases.