Merge changes from topic 'nyc-mr1-ue_sideload_recovery' into nyc-mr1-dev

* changes:
  Replace OTA sideload verification key when signing A/B devices.
  Install the update-payload-key in the recovery image as well.