Sign the git tag in release script (#10925)

changelog.d/10925.misc

@@ -0,0 +1 @@
+Update release script to sign the newly created git tags.

scripts-dev/release.py

@@ -276,7 +276,7 @@ def tag(gh_token: Optional[str]):
     if click.confirm("Edit text?", default=False):
         changes = click.edit(changes, require_save=False)
 
-    repo.create_tag(tag_name, message=changes)
+    repo.create_tag(tag_name, message=changes, sign=True)
 
     if not click.confirm("Push tag to GitHub?", default=True):
         print("")