wip: make gpg.keyname optional in release workflow; update docs

Author: simbo1905

.github/workflows/release-on-tag.yml

@@ -45,10 +45,13 @@ jobs:
           CENTRAL_USERNAME: ${{ secrets.CENTRAL_USERNAME }}
           CENTRAL_PASSWORD: ${{ secrets.CENTRAL_PASSWORD }}
         run: |
-          mvn -B -ntp \
+          KN="${{ secrets.GPG_KEYNAME }}"
+          EXTRA=""
+          if [ -n "$KN" ]; then EXTRA="-Dgpg.keyname=$KN"; fi
+          mvn -B -ntp -P release \
             -Dgpg.passphrase="${{ secrets.GPG_PASSPHRASE }}" \
-            -Dgpg.keyname="${{ secrets.GPG_KEYNAME }}" \
-            -P release clean deploy
+            $EXTRA \
+            clean deploy
 
       - name: Configure Git identity
         run: |

AGENTS.md

@@ -84,7 +84,7 @@ Automated Release (preferred)
 - Push a tag named `release/X.Y.Z` (semver, no leading `v`).
 - The workflow `.github/workflows/release-on-tag.yml` will:
   - Create a GitHub Release for that tag with autogenerated notes.
-  - Build and deploy artifacts to Maven Central with `-P release` (Central Publishing plugin). Uses `-Dgpg.passphrase=${{ secrets.GPG_PASSPHRASE }}` and `-Dgpg.keyname=${{ secrets.GPG_KEYNAME }}` for signing.
+  - Build and deploy artifacts to Maven Central with `-P release` (Central Publishing plugin). Uses `-Dgpg.passphrase=${{ secrets.GPG_PASSPHRASE }}` and optionally `-Dgpg.keyname=${{ secrets.GPG_KEYNAME }}` for signing when set.
   - Create a branch `release-bot-YYYYMMDD-HHMMSS` at the tagged commit and open a PR back to `main` (no version bumps).
 
 Manual Release (local)

RELEASE-GIST.md

@@ -40,10 +40,8 @@ jobs:
           CENTRAL_USERNAME: ${{ secrets.CENTRAL_USERNAME }}
           CENTRAL_PASSWORD: ${{ secrets.CENTRAL_PASSWORD }}
         run: |
-          mvn -B -ntp \
-            -Dgpg.passphrase="${{ secrets.GPG_PASSPHRASE }}" \
-            -Dgpg.keyname="${{ secrets.GPG_KEYNAME }}" \
-            -P release clean deploy
+          KN="${{ secrets.GPG_KEYNAME }}"; EXTRA=""; [ -n "$KN" ] && EXTRA="-Dgpg.keyname=$KN";
+          mvn -B -ntp -P release -Dgpg.passphrase="${{ secrets.GPG_PASSPHRASE }}" $EXTRA clean deploy
       - name: Configure Git identity
         run: |
           git config user.name "github-actions[bot]"
@@ -65,7 +63,7 @@ jobs:
 
 - CENTRAL_USERNAME, CENTRAL_PASSWORD (Central Portal token)
 - GPG_PRIVATE_KEY (ASCII-armored secret key), GPG_PASSPHRASE
-- GPG_KEYNAME (fingerprint of the signing key; set by helper script)
+- GPG_KEYNAME (optional; fingerprint of signing key — helper script sets it; if absent, default key is used)
 
 zsh helper (uses gh, gpg) — auto-detects a signing key if not provided: