builtin/receive-pack: use check_signature from gpg-interface