packages missing signatures

[graingert]

I'm validating all packages on install, with sbt-gpg to be able to install your package I need locked and signed versions.

@trautonen please release your packages to Maven central, not just staging.