add ContentProvider for searching by keyId and email, similar to APG's #1442

We can't actually make our ContentProvider work for apps that expect to use
APG's ContentProvider because we can't claim APG's permission for this. So
instead, this is just a similar, tho expanded, API.