pull: handle --verify-signatures for unborn branch