stage1: gpg verify and cache retrieved coreos image

Just using the stable version "current" currently maps to, not intending to alter the resulting rootfs with this PR.