ci: sign commits for bot workflows (#1419)

Co-authored-by: Marcos Sevilla <[email protected]>
Co-authored-by: Marcos Sevilla <[email protected]>

Author: vgvbot

.github/workflows/bump_templates.yaml

@@ -25,10 +25,11 @@ jobs:
       - name: Create Pull Request
         uses: peter-evans/[email protected]
         with:
-          token: ${{ secrets.VGV_BOT_PAT }}
           base: main
+          labels: bot
           branch: feat/bump-template-bundles
-          commit-message: "feat: bump template bundles"
           title: "feat: bump template bundles"
           body: Please squash and merge me!
-          labels: bot
+          commit-message: "feat: bump template bundles"
+          token: ${{ secrets.VGV_BOT_PAT }}
+          sign-commits: true

.github/workflows/spdx_license_bot.yaml

@@ -49,10 +49,11 @@ jobs:
         if: ${{ env.did_change == 'true' }}
         uses: peter-evans/[email protected]
         with:
-          token: ${{ secrets.VGV_BOT_PAT }}
           base: main
+          labels: bot
           branch: chore/update-spdx-license
-          commit-message: "chore: update SPDX licenses"
           title: "chore: update SPDX licenses"
           body: Please squash and merge me!
-          labels: bot
+          commit-message: "chore: update SPDX licenses"
+          token: ${{ secrets.VGV_BOT_PAT }}
+          sign-commits: true