gpg2: use cloudhsm

[g-k]

gpg analog of #381

• find and configure a backend like gnupg-pkcs11-scd
• confirm CloudHSM supports the signing ops gpg needs (should just be RSA sign/verify)
• add all of that config and os packages app and update the signer and test calls