add maven signing

.github/workflows/maven-release.yaml

@@ -14,17 +14,21 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - run: echo '${{ env.GPG_SIGNING_KEY_ID }}'
+      - run: echo "gh input version ${{ github.event.inputs.version }}"
+      - run: echo 'gpg fingerprint ${{ vars.GPG_SIGNING_KEY_ID }}'
+      - run: echo 'gh actor ${{ env.GITHUB_ACTOR }}'
       - name: Setup GPG Signing Key
+        id: gpg
         uses: crazy-max/ghaction-import-gpg@v6
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
           passphrase: ${{ secrets.GPG_PASSPHRASE }}
-          fingerprint: 985E1B6AEBD22EBD083E37FD02F5F7011164C342 # ${{ env.GPG_SIGNING_KEY_ID }}
+          fingerprint: ${{ vars.GPG_SIGNING_KEY_ID }}
           git_user_signingkey: true
           git_commit_gpgsign: true
           git_config_global: true
-      - run: gpg -K
+      - run: gpg -K --keyid-format LONG --with-keygrip --with-subkey-fingerprint
+      - run: git config -l --show-origin
       - name: Setup Maven Central
         uses: actions/setup-java@v3
         with:
@@ -34,8 +38,10 @@ jobs:
           server-id: ossrh
           server-username: MAVEN_USERNAME
           server-password: MAVEN_PASSWORD
+      - run: cat ~/.m2/settings.xml
       - name: Publish Package
         run: mvn --batch-mode --no-transfer-progress clean deploy
         env:
           MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
           MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}