Extract the common code snippet about importing GPG secret key to the
support directory, and prepare for further modification.
See Definition of done.
For anything in this list which will not be completed, please provide a reason in the MR discussion
trigger-package has a green pipeline running against latest commit