DOC: update release process page, remove GPG-signing for PyPI

[rgommers]

PyPI now discards uploaded GPG signatures and then emails you that it has done so.

This also cleans up the page a bit so the instructions are easier to follow.