Sign your own binaries with go-tool-base, part 6: sign every release with GoReleaserMake a tagged release sign itself: record the KMS key and regenerate GoReleaser config with a signs block that calls gtb sign directly.
