rework gpg.conf based on the Riseup OpenPGP Best Practices

An implementation of https://help.riseup.net/en/security/message-security/openpgp/best-practices