Maven signatures

Please add [PGP signatures](https://blog.sonatype.com/2010/01/how-to-generate-pgp-signatures-with-maven/) for future releases, and if possible, existing releases. None of the artifacts are currently signed, which requires manually allowlisting the artifacts when using [Gradle dependency verification](https://docs.gradle.org/current/userguide/dependency_verification.html). 