[FEATURE] disable signed commit requirement for new repos

When importing new packages from the AUR they already bring a git history for which requiring each commit to be signed is not really of much use.

Disable the signed push requirement for new repos until the first tag is set.