use key from our server, not the gpg network

also ensure the key is refreshed if expired

manifests/repos/apt.pp

@@ -2,27 +2,34 @@
 # @api private
 define foreman::repos::apt (
   Variant[Enum['nightly'], Pattern['^\d+\.\d+$']] $repo,
-  Variant[String, Hash] $key = 'AE0AF310E2EA96B6B6F4BD726F8600B9563278F6',
+  String $key = 'AE0AF310E2EA96B6B6F4BD726F8600B9563278F6',
+  Stdlib::HTTPUrl $key_location = 'https://deb.theforeman.org/foreman.asc',
   Stdlib::HTTPUrl $location = 'https://deb.theforeman.org/',
 ) {
   include apt
 
-  ::apt::source { $name:
+  apt::key { $name:
+    ensure => refreshed,
+    id     => $key,
+    source => $key_location,
+  }
+
+  apt::source { $name:
     repos    => $repo,
     location => $location,
-    key      => $key,
     include  => {
       src => false,
     },
+    require  => Apt::Key['foreman'],
   }
 
-  ::apt::source { "${name}-plugins":
+  apt::source { "${name}-plugins":
     release  => 'plugins',
     repos    => $repo,
     location => $location,
-    key      => $key,
     include  => {
       src => false,
     },
+    require  => Apt::Key['foreman'],
   }
 }

spec/defines/foreman_repos_apt_spec.rb

@@ -12,7 +12,7 @@
   end
 
   let(:apt_key_title) do
-    "Add key: #{apt_key} from Apt::Source foreman"
+    "foreman"
   end
 
   context 'with repo => 1.18' do