Sign commits with GPG key

A GPG key (GPG as GNU Privacy Guard) is a digital key that represents your identity. It is usually used to sign data to prove it comes from you.