Update uri for gpg repo key

Pulling this from my other PR as this is more important to merge ASAP.
This is exactly what you shouldn't do in an attribute file.