search for apkovl script in current dir, in ~/.mkimg and in the dir where the mkimage script was started from.
the boot repositry needs to be signed with a key. We explicitly copy this to initramfs so users don't need use --hostkeys which requires access to /etc/apk/keys/ without the key in intramfs the boot repository will be useless
