Merge branch 'jason/NNS1-2718' into 'master'

feat(ic-admin): NNS1-2718 Change both RegistryCanister and RegistryClientImpl check responses against nns public key

Overall, the response checking is enabled if (a) ic-admin is pointed to mainnet, or (b) `verify-nns-responses=true` and a key file is given (the logic is refactored to a function `parse_nns_public_key`.

3 major changes:
1. RegistryCanister now uses an agent with nns_public_key similar to when ic-admin calls other canisters.
2. RegisterClientImpl now uses CertifiedNnsDataProvider which calls a certified endpoint with an update call.
3. Change IC_DOMAIN to IC_DOMAINS to cover more cases for nns-url param.

Closes NNS1-2718 

Closes NNS1-2718

See merge request dfinity-lab/public/ic!17253