Add script to verify all merge commits are signed

trusted-keys is missing fingerprints for jgarzik/gmaxwell
And apparently function definitions are indeed standard POSIX. But the 'function' keyword is not. You can just remove the 'function ' in front.