Ops tests commit unsigned in their scratch repositories, whatever the developer's signing setup
The backup drill and restore tests made commits with the global commit.gpgsign, so they failed wherever a signing agent could not answer (1Password from a non-interactive shell).