Drop gpg-signing local archive and mark it as [trusted=yes] instead

This gets rid of the requirement to generate a gpg key on first run. Drop
corresponding --gnupg-home option.

LP: #1472691