Use Github's API to verify a signed tag in a repository