feat(coreos): add gpg

the installer uses GPG to verify digests. Other people can and should
use gpg to verify stuff they download to the host.
Merge pull request #208 from philips/add-gpg

feat(coreos): add gpg