attach: replay each rewritten commit through one commitTree helper

rewriteWithTrailer built the commit-tree arguments and identity env inline in its loop. Move that into commitTree, which takes the parents as strings, so the next change can call it twice for the same commit (signed, then unsigned) without repeating the env setup. No behavior change.