builtin-am: implement -S/--gpg-sign, commit.gpgsign