Pass through gpg settings for signature verification

"show --show-signature" does not correctly use gpg.program setting.
Commit signing, tag signing, and tag verification use this setting
properly.