archweb: set gpg_whitelist to archweb signed key

ansible 2.9.0 has a new git module feature gpg_whitelist which is an
array of allowed keys. If a tag or commit was signed with a different
key ansible aborts.

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>