> Is there a reason there isn't a default signing key generated for each cloned/created repo, or an easy option to toggle to do the same? > > Knowing a commit came from one specific clone of a repo would be useful, [...]

Would it?