Release process: sign all *.tar.* under a given dir