Validate signatures before publishing images

[lbussell]

If signing is enabled, the Publish job should verify the signatures of images before copying them to the publish repo prefix. This would prevent accidental publishing of unsigned images or publishing invalid signatures.