auto-sign repos (or packages)

[alfredodeza]

Some projects need to have automatic repository (for DEBs) or package (for RPMs) signing.

An unattended signing process requires a number of constraints, primarily is the ability to not require a passphrase (or to have it in clear text somewhere).

[ktdreyer]

It would be really amazing if we could re-use merfi for this