bugbuddy: Move from sq to rsop

The sequoia cli once again changed their interface, therefore port this
to the (somewhat guaranteed to be) stable sops interface.

Suggested-by: David Runge <dvzrv@archlinux.org>
Signed-off-by: Christian Heusel <christian@heusel.eu>

roles/bugbuddy/files/bugbuddy-download.sh

@@ -61,25 +61,7 @@ for link in "${LINKS[@]}"; do
 	curl --progress-bar --show-error --fail --location --remote-name "${link}"
 done
 
-for uid in "${TRUSTED_UIDs[@]}"; do
-	sq network wkd fetch "${uid}"
-done
-
-for fp in "${TRUSTED_KEYS[@]}"; do
-	sq --force pki link add --all "${fp}"
-done
-
-verified=0
-for key in "${TRUSTED_KEYS[@]}"; do
-	if sq verify --signer-cert "${key}" --detached ${NAME}.sig ${NAME}; then
-		verified=1
-		break
-	fi
-done
-if (( ! verified )); then
-	echo "failed to verify downloaded artifacts" >&2
-	exit 1
-fi
+rsop verify "${NAME}.sig" <(pacman-key --export "${TRUSTED_KEYS[@]}") < "${NAME}"
 
 chmod +x ${NAME}
 mv --verbose ${NAME} "${TARGET_DIR}/${NAME}"

roles/bugbuddy/tasks/main.yml

-- name: Install sequoia
-  pacman: name=sequoia-sq state=present
+- name: Install rsop
+  pacman: name=rsop state=present
 
 - name: Install systemd service
   copy: src=bugbuddy.service dest="/etc/systemd/system/bugbuddy.service" owner=root group=root mode=0644