Enforce Github deployment signatures