Add GnuPG package

Fixes #35

This also adds auto-init of GPG keys, as well as a handy script to encrypt data using GPG directly from the container (e.g. with podman exec salt salt-gpg mysecret or kubectl exec -n salt -q deploy/salt -- salt-gpg mysecret).

Feel free to cherry pick, we are using this in production.