fix: Stop using https://dist.apache.org/repos/dist/dev/arrow/KEYS for verification

[raulcd]

Which issue does this PR close?

• Closes Use release KEYS file for verification instead of dev KEYS #9603

Rationale for this change

The release and dev KEYS files could get out of synch.
We should use the release/ version:

• Users use the release/ version not dev/ version when they verify our artifacts' signature
• https://dist.apache.org/ may reject our request when we request many times by CI

What changes are included in this PR?

Use https://www.apache.org/dyn/closer.lua?action=download&filename=arrow/KEYS to download the KEYS file and the expected https://dist.apache.org/repos/dist/dev/arrow for the RC artifacts.

Are these changes tested?

Yes, I've verified 58.1.0 1 both previous to the change and after the change.

Are there any user-facing changes?

No

[raulcd]

@alamb I've created this minor fix after running the release verification and realizing this was not changed yet. It matches the change we did on apache/arrow (apache/arrow#47182) and apache/arrow-go (apache/arrow-go#683)

[alamb]

Thanks @raulcd -- I also verified this works locally agianst the 58.1.0 release

[alamb]

Thanks again @raulcd