Sign testing images automatically

Using the new sign-images script, sign *non-release* builds
automatically as they're made. Release builds will still only be
signed when they've had some testing.