GCM 2.3.2

release: validate linux signatures

Upload GCM's public key as a release asset. Add instructions for users to
import this key and use it to validate the latest Debian package and tarball.