feat: add workflow for signing release binaries

[tgunnoe]

Overview

🗹 TODO before merging

• Ready

📌 Submission Checklist

• Changes are backward-compatible (or flagged if breaking)
• Pull request description explains why the change is needed
• Self-reviewed the diff
• I have included a change file, or skipped for this reason:
• If the changes introduce a new feature, I have bumped the node minor version
• Update documentation (if relevant)
• Updated AGENTS.md if build commands, architecture, or workflows changed
• No new todos introduced

🧪 Testing Evidence

Please describe any additional testing aside from CI:

• Additional tests are provided (if possible)

🔱 Fork Strategy

• Node Runtime Update
• Node Client Update
• Other:
• N/A

Links

[github-actions]

KICS version: v2.1.16

Category Results CRITICAL 0 HIGH 0 MEDIUM 97 LOW 12 INFO 83 TRACE 0 TOTAL 192	Metric Values Files scanned 30 Files parsed 30 Files failed to scan 0 Total executed queries 73 Queries failed to execute 0 Execution time 7

[CLAassistant]

All committers have signed the CLA.