stage1: gpg verify and cache retrieved coreos image

I would recommend adding a -L to enable 30x redirects. Google storage doesn't often use them but does sometimes.