Add support for adding public keys to packages

Idea to enable bots/GH actions to upload packages on releases.
* Owner generates a pair of public/private keys.
* Public key is stored in authors.yaml.
* Private key is kept by uploading bots as secret.
* bananas-cli and api perform a handshake for authentication.