Update tarsnap task to use apt signed-by for package signing keys instead of adding keys directly to apt-key.