luacat/lib: add apt.key function

[zombiezen]

In installing from custom sources, it's quite necessary to be able to explicitly trust a GPG key. I forgot why I didn't do this to begin with, but it should act similarly to how Puppet handles this case.