gpg: use --with-fingerprint option

We need this option so that fingerprint is always displayed when
verifying commit / tag signature. Before that it was only displayed for
untrusted keys.