builtin-am: implement -s/--signoff