Fix ASCII-armor file generation

Allow passphrase-protected PGP key (passphrase is read from a file named
'gpg-passphrase' in the user's home directory). If that file does not
exist, gpg will fall back to using gpg-agent, which may request the
passphrase interactively.

Avoid interactive entry by using --pinentry=loopback option.

Fixes #28635