Edit release process to have signed tags and signed releases

https://github.com/ossf/scorecard/blob/main/docs/checks.md#signed-releases

See https://github.com/envoyproxy/envoy/pull/17515#discussion_r679469332