Prep for 0.9.0-rc1 release: bump version and add KEYS file for artifact verification.
update changelog for 0.9.0-rc1, prep for rc2