Documentation for 3rd party sources isn't clear about adding gpg keys

[bcl]

https://osbuild.org/docs/on-premises/installation/managing-repositories

only mentions adding the gpg key in the section about checking repo metadata, not in the main section.