Create a new subkey for our Tor Browser GPG key

The currently used GPG subkey for signing our packages is expiring in a couple of weeks. We should create and deploy a new one.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information