Commit signatures are currently top-level models and have some
duplicated code. This change moves the signatures into a CommitSignature
module, and moves shared code into a concern.