Client verification of signed artifact

Acceptance criteria:

• Public key must be loaded from specified setting in conf file
• This key, and only this, must be used to verify the incoming update
• If the client cannot access the public key when it needs it or the public key is not valid, the update fails
• Any failure during verification, whether it's during header parsing, or right before the final write to the partition, must cause an update failure