The signing of the artifacts ist done in the deploy-phase (was verify)