* +gitsign -- Keyless Git signing with Sigstore * add git dependency * move git dep to top level * fix typo and include git in test only * if it needs git for the test, it'll need it to run --------- Co-authored-by: Jacob Heider <jacob@pkgx.dev>