1. Proposed title of this feature request

Validate GPG signature of intermediate commits

2. What is the nature and description of the request?

When ArgoCD sync to a new git ref, it should check the signature of all commits between the last synced commit and the new commit

3. Why does the customer need this? (List the business requirements here)

All code deployed into our cluster by ArgoCD must be signed by a trusted developer. Without this feature ArgoCD will sync unsigned changes, if a developer inadvertently pulls them in as part of doing a later commit

4. List any affected packages or components.

ArgoCD (OpenShift GitOps)