sign current repository

`git log --show-signature` can be used to verify the current contents of
the repository and all commits leading up to it.