add trusted key store

This will allow us to use `go generate` to update the keymap.go source file from keygen.go. I'm auto-generating the GPG keys used for testing vs using fixtures. To be honest, there is no real reason to support go generate here. We can just as easily do:

```
cd pkg/keystore/keystoretest
go run keygen.go
```

Happy to remove this.