feat(core_upload_update): insert the public key

shove the public key into the image so it can be found by update_engine