Use signed tags instead of tarballs with detached signatures for releases
The Makefile based workflow to create a tarball and detached signature requires the Makefile to be changed on every release. This is error-prone and not required, when cloning from a signed tag.