gitconfig: Provide global ignores, and generate file from skeleton.

The latter follows from the former: we need to put a global gitignore
file somewhere, but we can't fix a location for it.  The only solution
is to have setup figure out where the ignores file is and plug that into
the config file.

Take the opportunity to un-hardcode the signing key too.