add ability to sign the git commits

[rajatjindal]

currently the spin plugin release bot cannot sign the commits, which is required for merging the PRs in spin-plugins repo.

see spinframework/spin-plugins#85 as an example.