make it clearer that the :signing key is first-level

This PR improves the GPG documentation to make the placement of the `:signing` key clearer.
Note the additional missing `}` and more intuitive indention.