Nothing no review really, the files are not human-readable anyway.

They get mangled somewhere on the way. As it is internal tool, there's
no motivation to track down where, so replacing with simple stars.

Committing without review, as trivial.

Recreate the gpg home directory instead of packing it in git. It seems
the format is not transferable.

Also, provide maintenance script to refresh the keys (import
revocations, etc).

And move the directory to .git-gpg, so it doesn't bother people.

To check the tip of the current git branch is signed.