git sign plugin base

Serverside - Cron:
create a base folder, and then put bare git dirs in it.
for each git/subfolder:
 * fetch all
 * list all `git log --all --date-order --pretty=oneline --show-signature`
 * save commit-hash, a project-reference, a gpg status, sign- uid, email and fingerprint
 
 Serverside - JSON
 Make an api that takes a commit-hash (or a list of them),
 and answer with 
 * a sign-status for: unknown, unsigned, invalid-sign, valid-signed,
 * a trust: unknown signer, global-trusted, project-trusted
 * key-fingerprint, uid and email of signer
 
 user.js for bitbucket and gitlab, to show if the commit is signed/trusted