tweak apt::source declaration

* Set release parameter correctly
* Get public key from HTTPS site to reduce chance of MITM attack