Commit signature

Commits should be signed to ensure trust and verification of source.

The repository flag Require signed commits (Settings > Branches) should be considered on relevant branches.