Correctly disable GPG check.

yum defaults to not checking signatures, but fedora enables it by default.
Thus, we need to disable for our repo.
Add some docs.