Support direct-from-maven dependencies that need generated OSGi metadata

Fix publishing location and do GPG signing.
diff --git a/maven-bnd/SimRelMavenBnd.jenkinsfile b/maven-bnd/SimRelMavenBnd.jenkinsfile
index 0dc35aa..5be85bb 100644
--- a/maven-bnd/SimRelMavenBnd.jenkinsfile
+++ b/maven-bnd/SimRelMavenBnd.jenkinsfile
@@ -13,7 +13,7 @@
   }
 
   environment {
-    PUBLISH_LOCATION = 'simrel-maven'
+    PUBLISH_LOCATION = 'simrel-maven-bnd'
   }
 
   parameters {
diff --git a/maven-bnd/site/pom.xml b/maven-bnd/site/pom.xml
index 5cc85c6..2e01357 100644
--- a/maven-bnd/site/pom.xml
+++ b/maven-bnd/site/pom.xml
@@ -28,4 +28,39 @@
 			</plugin>
 		</plugins>
 	</build>
+
+	<profiles>
+		<profile>
+			<id>gpg-sign</id>
+			<activation>
+				<activeByDefault>false</activeByDefault>
+			</activation>
+			<build>
+				<plugins>
+					<plugin>
+						<groupId>org.eclipse.tycho</groupId>
+						<artifactId>tycho-gpg-plugin</artifactId>
+						<version>${tycho-version}</version>
+						<configuration>
+							<keyname>${gpg-keyname}</keyname>
+							<skipIfJarsigned>true</skipIfJarsigned>
+							<forceSignature>
+								<bundle>bcpg</bundle>
+								<bundle>bcprov</bundle>
+							</forceSignature>
+						</configuration>
+						<executions>
+							<execution>
+								<phase>package</phase>
+								<goals>
+									<goal>sign-p2-artifacts</goal>
+								</goals>
+							</execution>
+						</executions>
+					</plugin>
+				</plugins>
+			</build>
+		</profile>
+	</profiles>
+
 </project>