Should be based on stackage-upload, and ultimately support GPG signature uploads to sig archive.