git: gpg key signing