Add missing new files/sources
    
    The GPG public key is not expected to be changing from release to
    release, so it's added to git, the GPG signature is going to change from
    release to release, so it's added to the 'sources' file