Add helper to check if a key can be certified

An OpenPGP key, or more precisely one or more of its user IDs, can be
certified if the key itself is valid (i.e. not revoked, expired, or
otherwise invalid) and if at least one of the user IDs is valid.

• GnuPG-bug-id: T6155