Convered GPGKey tests to use Factory and APIs for dependent entities

- Using make_gpgkey for create/update/delete tests
- Used api's mostly for tests where we are associating GPGKey with product/repo etc.

How about moving `with Session(...) as session:` down to here?