The automated signing of commits pushed to the gh-pages branch is not currently possible, which means that it's not possible to require the signed commits nor specify a certain person who can force push.
This requires modification of the GitHub Action.