Create a new MAR signing key for ESR60

Due to the new signing related code coming with ESR60 (which we intend to use instead of our own patch(es)), we need a new MAR signing key we want to ship with the first ESR60-based alpha. (See: https://lists.torproject.org/pipermail/tbb-dev/2018-April/000837.html item 3)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information