includes: fix path to WMF repo pubkey
The wmf-debci-bookworm image has the apt repo key installed in /etc/apt/trusted.gpg.d/ rather than /etc/apt/keyrings (which is where puppet installs it on production hosts), so specify that path in Signed-By.
Bug: T380164