aurweb: Skip commit validation if we are not on prod

This makes it so that you don't need to be in the list of trusted GPG
keys `aurweb_pgp_keys` in order to start a test instance for the AUR. I
think `aurweb_pgp_keys` should only be for people wanting to deploy this
to production.

roles/aurweb/tasks/main.yml

@@ -63,7 +63,7 @@
     repo={{ aurweb_repository }}
     dest="{{ aurweb_dir }}"
     version={{ aurweb_version }}
-    verify_commit=true
+    verify_commit="{{ aurweb_environment_type == 'prod' }}"
     gpg_allowlist='{{ aurweb_pgp_keys }}'
   become: true
   become_user: "{{ aurweb_user }}"
@@ -85,7 +85,7 @@
     repo={{ aurweb_repository }}
     dest="{{ aurweb_dir }}"
     version={{ aurweb_version }}
-    verify_commit=true
+    verify_commit="{{ aurweb_environment_type == 'prod' }}"
     gpg_allowlist='{{ aurweb_pgp_keys }}'
   become: true
   become_user: "{{ aurweb_user }}"