Generate tarballs in release CI

The generate_tarball job vendors all Go modules to make packaging for distributions easier.

In addition, detached GPG signature can be created (not implemented in this MR).