system tests: use repository mirrors on S3 for reproducibility

no direct internet download from apt repositories,
which over time will change or cease to exist.

also migrate to gpg2 on newer ubuntu.

system/t04_mirror/ShowMirror8Test_gold

@@ -1,7 +1,6 @@
 {
-  "UUID": "548dbdb6-75d6-42ac-80de-d6aff8012f83",
   "Name": "mirror4",
-  "ArchiveRoot": "http://archive.debian.org/debian-security/",
+  "ArchiveRoot": "http://repo.aptly.info/system-tests/archive.debian.org/debian-security/",
   "Distribution": "stretch/updates",
   "Components": [
     "main"
@@ -18,7 +17,7 @@
     "Architectures": "amd64 arm64 armel armhf i386",
     "Codename": "stretch",
     "Components": "updates/main updates/contrib updates/non-free",
-    "Date": "Wed, 26 Jan 2022 10:02:07 UTC",
+    "Date": "anytime",
     "Description": " Debian 9 Security Updates\n",
     "Label": "Debian-Security",
     "Origin": "Debian",