How to get verified commits for the generated PR?

https://github.com/googleapis/release-please-action/pull/1039/commits

Note how the commit is not verified.

If I have a branch protection rule on main/master to require verified commits, then I won't be able to merge this PR.

I've been searching around for hours looking for how to fix this issue, and other than turning off the verified commits requirement, I'm not seeing it.

Start with the linked pull request's commit history and the release-please-action entry points that create its commits. Trace how the generated PR is authenticated and identify the supported way to satisfy verified-commit branch protection, or document the limitation and required configuration. Done means the repository has a clear, tested answer to this workflow.

Written by the indexing model from the issue text.