Updating the public key for package verification

[theBadT]

Hey folks,

Along the 2511 release we'll be exchanging the private key, used for signing apax packages, for all repositories within the GitHub organisation. Due to that, we'll be providing a new public key to be used inside the apax.yml for signature verification.

We're rotating the key to keep a certain level of confidence when consuming packages from the GHCR. NONE of the current or previous keys has been leaked though.

Regards,
Thomas