fix(ci): set up signing at root project level#1435