update-keys: switch to keyserver keyserver.ubuntu.com

As the SKS infrastructure is offline for good, we need to switch to keyserver.ubuntu.com for the time being.

The Ubuntu keyservers to not support EC keys, thus we have to ignore failure when refreshing keys.