Add an encrypted GnuPG keyring and use it for signing the artifacts.
When a Tag is present deploy to sonatype staging repository.