Sign commits with gpg

As discussed in ticket:25102#comment:20, we should sign all top commits from branches that are used in nightly builds.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information