Add security@ipfs.io GPG key

[ghost]

Not sure which other steps are involved here when updating init-docs.

[hackergrrl]

Is it worth mentioning what things the key is used for? As in, what data/documents/files users should expect to be able to check for signatures on?

Re update: I think there are several js-ipfs tests that make some deep assumptions about the init-docs IPFS hash, and will probably need to be updated with this new one.

• Root hash:

  js-ipfs/test/cli/test-files.js

  Line 34 in bf62c28

  it('add recursively', (done) => {

• Lots for the security-notes file 😢 https://github.com/search?q=QmTumTjvcYCAvRRwQ8sDRxh8ezmrcr88YFU7iYNroGGTBZ&ref=searchresults&type=Code&utf8=%E2%9C%93

[daviddias]

@lgierth finished this for you :)

[ghost]

diasdavid best david <3