Releases are not signed

[hasufell]

It has happened before that accounts were compromised and people pushed malware into the Release pages, e.g. with Gitea.