More Kicksecure and Whonix updates, minor enhancements to template.yaml

• The Kicksecure and Whonix signing keys were updated again, as we decided to make the keys not expire at all in order to avoid another key expiration issue like occurred recently.
• Onion URIs for both Kicksecure and Whonix repos are now added.
• I noticed that the "onion-URIs" key was misspelled in template.yaml (it was onion-uris, but https://salsa.debian.org/search?search=onion-uris&nav_source=navbar&project_id=39210&group_id=6604&search_code=true&repository_ref=master indicates that only onion-URIs is recognized by extrepo's code). That is now fixed.
• My text editor automatically stripped trailing spaces from the template when I did fixed onion-URIs, so I committed that too.