repoman: never force unsigned manifest commit