pgpkeys: create a new key for portmgr-secretary@

This key is signed by the old portmgr-secretary@ key and the rene@ key.

The old portmgr-secretary@ key used RSA2048 which became troublesome
in some cases. The new key uses ED25519.