[581397] Provide support for extracting, merging, and updating Maven
dependencies in *.target files

Delay PGP signing until after assembly.

https://bugs.eclipse.org/bugs/show_bug.cgi?id=581397