feat: sign released binaries

.env.dist

@@ -1,2 +1,3 @@
 GPG_SIGNING_KEY=
-ARCH_TARGETS='amd64 arm arm64 386'
+GPG_SIGNING_PASSPHRASE=
+ARCH_TARGETS='amd64 arm arm64'

script/release

@@ -39,7 +39,7 @@ function build {
 
   if [ ! -z "${GPG_SIGNING_KEY}" ]; then
     echo "signing '$destdir/$name' with gpg key '$GPG_SIGNING_KEY'..."
-    gpg --sign --default-key "${GPG_SIGNING_KEY}" --output "$destdir/$name.sig" "$destdir/$name"
+    echo $GPG_SIGNING_PASSPHRASE | gpg --pinentry-mode loopback --passphrase-fd 0 --sign --default-key "${GPG_SIGNING_KEY}" --output "$destdir/$name.sig" "$destdir/$name"
   fi
 }