gluebuddy: Move from sq to rsop

The sequoia cli once again changed their interface, therefore port this
to the (somewhat guaranteed to be) stable sops interface.

Suggested-by: David Runge <dvzrv@archlinux.org>
Signed-off-by: Christian Heusel <christian@heusel.eu>

roles/gluebuddy/files/gluebuddy_download.sh

@@ -40,16 +40,7 @@ do
   curl --silent --show-error --fail --location --remote-name "$i"
 done
 
-for uid in "${TRUSTED_UIDs[@]}"; do
-	sq network wkd fetch "${uid}"
-done
-
-for fp in "${TRUSTED_KEYS[@]}"; do
-	sq pki link add --all "${fp}"
-done
-
-sq verify --signer-cert "${TRUSTED_KEYS[0]}" --detached ${NAME}.sig ${NAME} || \
-	sq verify --signer-cert "${TRUSTED_KEYS[1]}" --detached ${NAME}.sig ${NAME}
+rsop verify "${NAME}.sig" <(pacman-key --export "${TRUSTED_KEYS[@]}") < "${NAME}"
 
 mv ${NAME} /usr/local/bin/${NAME}
 chmod +x /usr/local/bin/${NAME}

roles/gluebuddy/tasks/main.yml

-- name: Install sequoia
-  pacman: name=sequoia-sq state=present
+- name: Install rsop
+  pacman: name=rsop state=present
 
 - name: Install systemd service/timer
   copy: src={{ item }} dest="/etc/systemd/system/{{ item }}" owner=root group=root mode=0644