* don't sign builds unless they're tag AND in main or dev

* make steps have different names

* fix yaml?

* only sign if there's a tag and it doesn't have a dash

* rework matches to not be yaml arrays