Add KEYS file.

This contains public PGP keys we'll be using to sign releases.

Instructions are cribbed from the files used by Apache projects.