We could add more ways of specifying a key, such as picking one from the
adopted identity, but for now with this change we allow users who know what
they are doing to sign their bug changes.

By simply passing "-S" to `git commit-tree` when "commit.gpgsign" is "true", we
use git's mechanism for key choosing which is either by the configured user
name and email OR by whatever is specified in "user.signingkey".

Supports git config includes

I like to have "private" settings in a git include file, and store the
main .gitconfig under version control. I do not want any authentication
keys or tokens (even if encrypted) in version control, so I have by main
.gitconfig include another file which is local and not tracked.

The current implementation calls `git config --global --get-regexp
<keyPrefix>` and for some reason, this command does not follow git
include files.

The changes suggested in this PR add the `--includes` flag to the
command, which then reads any included files.

build(deps): bump github.com/spf13/cobra from 0.0.6 to 0.0.7

gitlab: refactor the iterator, fix bug

Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 0.0.6 to 0.0.7.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v0.0.6...0.0.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Notably, properly reset sub iterators when changing to the next issue

build(deps): [security] bump acorn from 5.7.3 to 5.7.4 in /webui

build(deps): bump github.com/xanzy/go-gitlab from 0.27.0 to 0.29.0

replace the all-in-one query parser by a complete one with AST/lexer/parser

Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.27.0 to 0.29.0.
- [Release notes](https://github.com/xanzy/go-gitlab/releases)
- [Changelog](https://github.com/xanzy/go-gitlab/blob/master/CHANGELOG.md)
- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.27.0...v0.29.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

gitlab: fix issues import url

build(deps): bump github.com/mattn/go-runewidth from 0.0.8 to 0.0.9

Bumps [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) from 0.0.8 to 0.0.9.
- [Release notes](https://github.com/mattn/go-runewidth/releases)
- [Commits](https://github.com/mattn/go-runewidth/compare/v0.0.8...v0.0.9)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

build(deps): bump github.com/MichaelMure/go-term-text from 0.2.7 to 0.2.8

Bumps [github.com/MichaelMure/go-term-text](https://github.com/MichaelMure/go-term-text) from 0.2.7 to 0.2.8.
- [Release notes](https://github.com/MichaelMure/go-term-text/releases)
- [Commits](https://github.com/MichaelMure/go-term-text/compare/v0.2.7...v0.2.8)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [acorn](https://github.com/acornjs/acorn) from 5.7.3 to 5.7.4. **This update includes a security fix.**
- [Release notes](https://github.com/acornjs/acorn/releases)
- [Commits](https://github.com/acornjs/acorn/compare/5.7.3...5.7.4)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

build(deps): bump github.com/xanzy/go-gitlab from 0.26.0 to 0.27.0

Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.26.0 to 0.27.0.
- [Release notes](https://github.com/xanzy/go-gitlab/releases)
- [Changelog](https://github.com/xanzy/go-gitlab/blob/master/CHANGELOG.md)
- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.26.0...v0.27.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

add a how-to to explain usage with Github

github: fix matching cred/identity with badly cased login