products: Add rpm-ostree GPG key and gnupg2 to base set

In the modern Internet age, we *really* need transport integrity for
our binaries.