Teach git fast-import to check signatures

To be able to add new flags to git-filter-repo so it can better handle signed commits and tags as discussed in #510, we need to improve git fast-import first so that it can:

• check commit, and possibly tag, signatures,
• if they become invalid either:
  • error out,
  • drop the signature(s),
  • resign the commit (or possibly tag).