feat: sign released binaries

.env.dist

@@ -1,3 +1,2 @@
 GPG_SIGNING_KEY=
-GPG_SIGNING_PASSPHRASE=
-ARCH_TARGETS='amd64 arm arm64'
+ARCH_TARGETS='amd64 arm arm64 386'

script/release

@@ -39,7 +39,7 @@ function build {
 
   if [ ! -z "${GPG_SIGNING_KEY}" ]; then
     echo "signing '$destdir/$name' with gpg key '$GPG_SIGNING_KEY'..."
-    echo $GPG_SIGNING_PASSPHRASE | gpg --pinentry-mode loopback --passphrase-fd 0 --sign --default-key "${GPG_SIGNING_KEY}" --output "$destdir/$name.sig" "$destdir/$name"
+    gpg --sign --default-key "${GPG_SIGNING_KEY}" --output "$destdir/$name.sig" "$destdir/$name"
   fi
 }