Also export master-keys

Currently the update script only exposes the packager's keys.

To be able to verify our master-keys via WKD, we need to expose them as well.