Add --signoff to main branch rebase after updatepr

[keith]

Otherwise if you have a git hook that verifies this it might fail if you didn't signoff, when it doesn't matter since the commit will go away after the squash anyways.