Add script to verify all merge commits are signed