Make GPG signature verification work with non-primary email
The new GPG signature verification feature only works with primary email right now, as stated in the docs. There are use cases when your primary email is different from the email you sign the commits with, for example when your primary email is your company email. It would be nice if we could add a GPG key for a different email and Gitlab would verify the commits signed by that email.