Draft: Add developer guide for commit signing

What does this MR do and why?

Start a developer doc for commit signing. I've been working in this area for some time and it would seem prudent to share some info about how we retrieve and cache commit signatures in the rails backend.

References

Please include cross links to any resources that are relevant to this MR. This will give reviewers and future readers helpful context to give an efficient review of the changes introduced.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.