Merge changes from topic 'signed-push'

* changes:
  Configure signed push verification on a per-project basis
  Configure signed push globally in Gerrit config
  Verify pusher identity against public key
  Add basic signed push support
  Extract havePGP() to its own utility class