add more info about gpg verification without import

[n8fr8]

gpg --dearmor pubkey.asc
gpg --no-default-keyring --keyring ./pubkey.asc.gpg --homedir ./ --verify HASH.proof.csv.asc

[n8fr8]

This is a future option that doesn't require gpg import first.