Add upstream release signing key and do validation in debian/watch.

John Scottrequested to merge
(removed):unstable into unstable

Merge request reports