Install keys using gpg instead of gpg-wks-client to avoid stripping sigs

gpg-wks-client --install-key removes all signatures from the exported key. Since we rely on the master key signatures in pacman, we need to use gpg manually instead to preserve them.