Add support for embedding PGP keys into Signed-By in deb822 sources

Extend the Signed-By field to handle embedded public key blocks, this allows shipping self-contained .sources files, making it substantially easier to provide third party repositories.