Distribute public root key with app source code or settings

[adewes]

Currently we load the public root key with the other public keys from the API, which is not in the spirit of an end-to-end encrypted solution as the app implicitly trusts the backend to provide the correct key. The root key should instead be distributed with the app so that it can be verified independently of the backend API.