Releases page should include the binaries and be GPG-signed

[cblichmann]

See title. I think it'd be good practice to upload the binaries to the GitHub releases page as well and to have them GPG-signed.
After all, as a reverse engineer, I will not blindly run any tool without affirming its origins :)