Thanks, everyone for the input.
I've only heard opposition to requiring commit signoffs, so, at least for the projects in the 'wildfly' and `wildfly-extra` GH orgs, I think we have a consensus not to do them. For other orgs, well this is the kind of thing that top-level projects in the WildFly Commonhaus organization decide for themselves. And for other orgs that are part of WildFly AS I don't see any reason the relevant project leads can't decide for themselves. For those I think the default assumption is no signoff required.
For the CONTRIBUTING.md text, for repos in the 'wildfly' and `wildfly-extra` GH orgs I think what Narayana has in
https://github.com/jbosstm/narayana/blob/main/CONTRIBUTING.md#certificate-of-origin-and-license is good, except the copyright notice should say "The WildFly Authors" not "The Narayana Authors". It's similar in message to others I've read. The DCO language is also similar to others, and it follows some suggested language from Red Hat's Open Source Program Office.