Normal repository commits retain configured-key signing, failure stops,
and cryptographic verification. Internal git-bug tracker metadata may be
unsigned, so issue operations do not require a signing format that the
tracker cannot use. Code and documentation commits have no signing
exception.