Have Tails Upgrader trust both the old and new signing keys

This needs to be done in 1.3, to ensure a smooth upgrade path to 1.3.1.

Original created by @intrigeri on 8732 (Redmine)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information