Provide GPG signing for release to Maven Central

[gary-rowe]

The final artifacts should be available in Maven Central. This will require registration and obtaining a suitable GPG key to sign the final artifacts. This key needs to be securely held outside of version control to allow genuine MBM releases to be distinguished from forks.