tails::reprepro: automatically refresh OpenPGP keys in the GnuPG public keyring.

Note: given the dependencies on parcimonie (that's not exactly
lightweight yet) and systemd (that's not very widespread on Debian
servers yet), it doesn't feel worth pushing this to the upstream
reprepro module yet.