add workstation template 0.2.3

[sssoleileraaa]

Name of package: qubes-template-securedrop-workstation

Towards freedomofpress/qubes-template-securedrop-workstation#20

Test plan

• Tag in qubes-template-securedrop-workstation repository is correct: https://github.com/freedomofpress/qubes-template-securedrop-workstation/releases/tag/0.2.3
• Build logs are included: freedomofpress/build-logs@2b2738f
• CI is passing, the rpm is properly signed with the test key
• Unsigned RPM after running rpm --delsign on the signed RPM results in the checksum found in the build logs

VM sanity check

I have not yet performed these simple tests to verify VM functionality, please do so as part of review:

• Template installs successfully in dom0
• Set VM to HVM and kernel to ''
• Template boots in grsecurity kernel
• apt-key finger shows the release key in its own keyring
• the old key is not present
• securedrop-keyring package is installed
• sudo echo hello does not prompt for sudo password

See freedomofpress/qubes-template-securedrop-workstation#20 for reference

[conorsch]

Works well. I used a slightly different test plan from what's in the OP:

1. Copied to dom0 and installed manually
2. Ran make dev to create a new dev env
3. Ran client, confirmed basic operations such as decryption and DispVMs worked well

Comfortable merging this as-is into yum-test. Tomorrow I'll work on a clean install of the staging environment, using this RPM from the repo.