Implement keyless verification

Currently, keyless signing is in production in experimental mode, as generated attestations are not yet verifiable (because generated certificate is not stored).

This task is for implementing the full verification scenario, following best practices.