Further gpg reading reference in gpg doc

[brodycj]

Add this reference:

• https://www.apache.org/dev/new-committers-guide.html#set-up-security-and-pgp-keys

from this email on the dev mailing list