Support for API based Signing Commits

[pragmaticivan]

Similar to peter-evans/create-pull-request#3057

Support signing commits when using GITHUB_TOKEN in github actions.

There will be an upper bound of 40Mib for this operation, so people can still use GPG setup in different ways but use the direct API without any need for keys.