How did Jia Tan, the attacker who created the XZ backdoor, hide the timezone information in Git commits? https://dallas.lu/how-to-fake-the-timezone-of-a-git-commit/