Verified in person and via signature with old key. Will remove old key in a bit.
Provides continuity of trust from legacy PGP release key to the SSHSIG signing keys that we will use henceforth for git signing.