[opensuse-factory] gpg signature check in bootstrap packages