Note that this is a quick implementation of commit signature verification that ignores a lot of what
git does and can do, while focussing on the gist of it.
For this to go into gix, one will have to implement many more options and various validation programs.