Incorrect link to KEYS in release notes

The KEYS file must be published from the ASF mirror hosts, i.e.

http://www.apache.org/dist/jackrabbit/

See:
https://www.apache.org/dev/release-distribution#sigs-and-sums
"Projects MUST publish a KEYS file in their distribution directory
which contains all public keys used to sign artifacts."