Add GPG doc.
Link the GPG doc to 'help gpg'
Add notice about 'help gpg' to error output.

This covers artifact signing, credential decryption, and dependency
verification.
Remove unneeded bindings around consolidated gpg.
Bugfix: Restrict repo credential lookup to known keys.

The last test in that set is a regression test discovered while working
on #949.