tests: make forging GPG signed commits and tags more robust