Add cm gpg key when needed

ansible/roles/install_packages/tasks/main.yml

 ---
-- name: Copy yum repo files
+- name: Copy yum repo files into place
   ansible.builtin.copy:
     src: "{{ item }}"
     dest: "/etc/yum.repos.d/{{ item }}"
@@ -8,6 +8,15 @@
     mode: 0644
   loop: "{{ yum_repo_files }}"
 
+- name: Copy CM repo GPG key
+  ansible.builtin.copy:
+    src: RPM-GPG-KEY-cm
+    dest: /etc/pki/rpm-gpg/RPM-GPG-KEY-cm
+    owner: root
+    group: root
+    mode: 0644
+  when: "'cm.repo' in yum_repo_files"
+
 - name: Install packages
   ansible.builtin.yum:
     state: present