Add support for adding apt signing keys

This is basically a copy of apt_repositories but adjusted to handle
keys instead. It sits before repositories since it can't refresh on
its own but the keys need to be loaded before apt runs next.

This is necessary if using an apt repository thats not in the distributions keyring.