add pgp keys for gitian-downloader

At the current state of the build system this mostly serves as a somewhat
trusted place to store the keys (note the signed commit), in the future
this will allow verifying signed builds