Start signing commits to go on our `deploy` branch

In the future I'd like to automate deployment of Inboxen with puppet or some ansible. I'd rather not rely on git's commit IDs alone (rather trivial to add a new commit that looks all valid from the outside) so GPG will be used to sign merges on that branch