As uncovered during NEXUS-847 , Sonatype now requests the artifacts should be signed using GPG/PGP.

We should add this check to the validations already existing in the source checking.