Verify git commits are gpg signed