Hi Eddie,
I'll start with the last since it may effect your choices on the rest. There is no setting to prevent users from changing their signatures, but you can "brute enforce" standardization by simply updating everyone's signatures say every hour. So even if they change it, it will soon be set back.
Some time ago I went down the same road as you, planning to use a .csv I updated by hand with GAM. Ultimately I found pulling the users live contact and related work info (title, department, etc) and adding any custom schema we wanted (pronoun etc) to be more usable and has the added benefit of automatically building out your employee records.
In my case I adapted a version of what this fellow designed around Apps Script and some custom user fields. Since you might be running whatever script you create all day every day to enforce the policy, it's also nice that GAS is "free" to run.
Btw watch out for the fact that Google's API doesn't support a couple things you might assume it does, for instance you can set the users signature for new messages, but there is no way to set the signature for replies. Google defaults signature on reply to off, but if your company culture requires it on every message (and especially if have already set it that way), you'll still need to prompt users to make that one setting themselves.
What you have there using sendas is not correct... that would be for adding/updating accounts the user can send from.
Cheers,
Ben