templates / branches--on commit push: the beginning of "git push --signed" (a85b377)
   1: this is just to ensure the directory exists.