Generate a second mar signing key for nightly

We currently have only one mar signing key accepted by the nightly builds. To plan for rotation of the key, we should generate a second one in advance (offline), and add it as toolkit/mozapps/update/updater/nightly_aurora_level3_secondary.der.