DSL: validate value of GPG key ID

The `gpg` CLI can recover keys from hexadecimal identifiers in three formats: fingerprint, ID, short ID. The latter two are merely substrings (length of 16, 8) of the full fingerprint (length of 40).

Ref. #6184