feat: use hockeypuck instead of sks

applications/open_governance/keyserver.nix

@@ -41,9 +41,21 @@ in {
       }
     ];
 
-    services.sks = {
+    services.hockeypuck = {
       enable = true;
-      hkpPort = port;
+      port = port;
+    };
+
+    # hockeypuck needs a database backend
+    services.postgresql = {
+      enable = true;
+      ensureDatabases = ["hockeypuck"];
+      ensureUsers = [
+        {
+          name = "hockeypuck";
+          ensureDBOwnership = true;
+        }
+      ];
     };
 
     services.nginx.virtualHosts = {