build: configure release signing and ignore keystores in .gitignore