Only run gpg signing on release

Author: MancunianSam

.github/workflows/release.yml

@@ -3,7 +3,7 @@ on:
   push:
     branches:
       - main
-      - 6.9.1
+      - 6.9.0
 permissions:
   contents: write
   pull-requests: write
@@ -37,12 +37,12 @@ jobs:
           git push -u origin $BRANCH_NAME
       - run: mvn -q clean install -DskipTests -q -DnvdApiKey=${{ secrets.NVD_API_KEY }}
       - run: mvn -q -B release:prepare -DskipTests
-      - run: mvn -B release:perform -DskipTests
+      - run: mvn -B release:perform -DskipTests -DperformRelease=true
       - run: |
           curl -X POST "https://api.github.com/repos/digital-preservation/droid/pulls" \
                       -H "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" \
                       -H "Accept: application/vnd.github+json" \
-                      -d '{"title": "Version bump for ${{ github.event.inputs.to-deploy }}","head": "$BRANCH_NAME","base": "main"}'
+                      -d '{"title": "Version bump","head": "$BRANCH_NAME","base": "main"}'
   github-release:
     runs-on: ubuntu-latest
     steps:

droid-parent/pom.xml

@@ -244,19 +244,6 @@
         </pluginManagement>
 
         <plugins>
-            <plugin>
-                <groupId>org.apache.maven.plugins</groupId>
-                <artifactId>maven-gpg-plugin</artifactId>
-                <executions>
-                    <execution>
-                        <id>sign-artifacts</id>
-                        <phase>verify</phase>
-                        <goals>
-                            <goal>sign</goal>
-                        </goals>
-                    </execution>
-                </executions>
-            </plugin>
             <plugin>
                 <groupId>org.sonatype.plugins</groupId>
                 <artifactId>nexus-staging-maven-plugin</artifactId>
@@ -580,6 +567,33 @@ Copyright &copy; ${project.inceptionYear}-{currentYear} <a href="${project.organ
     </reporting>
 
     <profiles>
+        <profile>
+          <id>release-sign-artifacts</id>
+          <activation>
+            <property>
+              <name>performRelease</name>
+              <value>true</value>
+            </property>
+          </activation>
+          <build>
+            <plugins>
+              <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <executions>
+                  <execution>
+                    <id>sign-artifacts</id>
+                    <phase>verify</phase>
+                    <goals>
+                      <goal>sign</goal>
+                    </goals>
+                  </execution>
+                </executions>
+              </plugin>
+            </plugins>
+          </build>
+        </profile>
+
         <profile>
             <id>upload-jacoco-to-coveralls</id>
             <activation>