ci: add build and sign step