Only signed commits

Semantic releases is not configured to sign commits so `Require signed commits` setting cannot be enabled on the main branch nor can the bot sign commits.
Generate a signing key with a passphrase and configure semantic releases to use it.
https://github.com/semantic-release/git#add-the-gpg-keys-to-travis-ci