GenerateKey task

This is a signing task that generates a new key on a signing worker and stores it for later use.

The task_data for this task may contain the following keys:

• purpose (required): the purpose of the key to generate: uefi, or openpgp.

• description (required): A text string with a human-readable description of the new key’s intended purpose.

The output will be provided as a debusine:signing-key artifact. The task should typically be configured with an update-collection-with-artifacts event reaction to attach the new signing key to the collection where it will be used, such as debian:suite-signing-keys.

Todo

This will need additional parameters once we start supporting HSMs.