Allow the gpg commit to be verified against multiple email in the profile

Description

With the news feature that allow us to be able to see every signed commit, I find it currently difficult to be able to use it has the GPG verification is only done on the primary email and is not taking into account any other email address that is currently in the user profile.

Proposal

Make the verification process check against all email address on the user profile.

Links / references

Documentation blurb

Overview

What is it? Why should someone use this feature? What is the underlying (business) problem? How do you use this feature?

Use cases

I want to use my GPG sign that I usually use for anything and not have to create a new one only for gitlab.

Feature checklist

Make sure these are completed before closing the issue, with a link to the relevant commit.