ci: force reupload with clobber, and sign a copy of the source archives (#792)

Author: braindigitalis

sign.sh

@@ -2,8 +2,13 @@
 rm -rf build/sign
 mkdir -p build/sign
 cd build/sign
+gh release download "$1" -A tar.gz
+sleep 2
+gh release download "$1" -A zip
+sleep 2
 gh release download "$1"
+sleep 2
 rm -fv *.asc
 find . -type f -exec gpg --armor --detach-sign {} \;
-gh release upload "$1" *.asc
+gh release upload "$1" ./* --clobber