Turn sys_apt_key into a modern custom resource and get rid of the deprecated apt-key

apt-key has been removed in Debian Trixie. The recommended way is to add repo keys to /etc/apt/keyrings/.

First draft, needs further testing.