@Arrababiski Thanks for putting up a fix.
In my opinion Required DatabaseNever
is a better setting, to not have the problem going forward. It means only look for package signatures, not database signatures.
[options]
...
SigLevel = Required DatabaseNever
Explanation at: [root tip] [How To] Mitigate and prevent GPGME error when syncing your system
Summary: the db sigs are optional. When not present, some mirrors return a HTML message saying not found, which pamac tries to use as a signature, resulting in error.