fix: dearmor Google Cloud GPG key for apt repository

The armored GPG key from packages.cloud.google.com/apt/doc/apt-key.gpg
must be dearmored before use as a signed-by keyring. Without dearmoring,
apt cannot verify the repository signature, failing with NO_PUBKEY
C0BA5CE6DC6315A3.

Author: Derek

ansible/roles/developer_core/tasks/gcloud.yml

@@ -41,11 +41,22 @@
           - gnupg
         state: present
 
-    - name: Download Google Cloud GPG key
+    - name: Download Google Cloud GPG key (armored)
       ansible.builtin.get_url:
         url: https://packages.cloud.google.com/apt/doc/apt-key.gpg
-        dest: /usr/share/keyrings/cloud.google.gpg
+        dest: /tmp/cloud.google.asc
         mode: '0644'
+        force: true
+
+    - name: Dearmor Google Cloud GPG key
+      ansible.builtin.shell:
+        cmd: gpg --batch --yes --dearmor -o /usr/share/keyrings/cloud.google.gpg /tmp/cloud.google.asc
+      changed_when: true
+
+    - name: Remove temporary armored key
+      ansible.builtin.file:
+        path: /tmp/cloud.google.asc
+        state: absent
 
     - name: Add Google Cloud CLI repository
       ansible.builtin.apt_repository: