Bumps the GPG passphrase cache from the 10-minute default to 8 hours (24h hard cap) and switches to pinentry-qt for a native KDE dialog, so signed commits stop re-prompting constantly.
