Sign all commits and track upstream for PRs