import gpg key for barbican

GPG checks can't be enabled until we sign all fpm'd packages.