addrepo: explicit GPG key, removed --gpg-auto-import-keys

Using ideas by @mapleoin
if install still fails, add the open builservice package vendor