Do not use temporary file for GPG validation

[hramrach]

gpg can verify stdin, use that instead of decompressing to a temporary file.

[hramrach]

There have been reports of OBS failing to verify the kernel because the source validator would run out of disk space.

No additional disk space is required with no temporary files.