git tag gpg signature validation of puppet modules

Before staging a puppet module for install the latest git tag is verified
using the available gpg key identities. The git tag pattern can be overriden
using a fourth argument in cosmos-modules.conf.