Fix reprepro permissions

Currently contributors uploading packages to our custom APT repo have permission to read and write both the reprepro config and the signing key. Let's fix that.