I was going to try it but signing commits with GPG using a Yubikey is not supported.

The option left is to use SSH to sign commits which is a no-go for a different reason.