Sign release tags

[adam-wolfe]

Is your feature or enhancement request related to a problem or limitation? Please describe

For the OpenSSF Best Practices silver badge:

It is SUGGESTED that in the version control system, each important version tag (a tag that is part of a major release, minor release, or fixes publicly noted vulnerabilities) be cryptographically signed and verifiable as described in signed_releases.

Describe your enhancement idea

Implement signing for release tags: https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-tags

[github-actions]

Thank you for raising this enhancement request.
The community has 90 days to vote on it.
If the enhancement receives at least 5 upvotes, it is added to our development backlog.
If it receives fewer votes, the issue is closed.

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.