Fluxion::Executor::RepositorySupport

Repository and signing-key kinds.

These decide what the machine will install as root, so they share one sequence: fetch the key unprivileged, verify it unprivileged, and only then cross the privilege boundary with a file that has already been checked. Nothing here passes a remote URL to a privileged tool and lets it fetch.