Fossil [0] can sign every commit [1] (with GPG or S/MIME) and have merges performed centrally because it never modifies history.

Git can probably also do this for certain merge modes ? I'm not very familiar with how this works in Git.

[0] https://fossil-scm.org/

[1] https://fossil-scm.org/home/help?cmd=clearsign