Bug 26045: Add new MAR signing keys

We need to have new MAR singning keys for our watershed update: both
keys we shipped so far need to get replaced by news ones, now using
SHA-384 as their hash algorithm.