Move GPG signing to the "release" profile.
Move GPG signing to the "release" profile.

GPG signing must be in the "release" profile, as otherwise it is not
possible to to a normal build.
This change also reformats the pom
trivago/triava