Add TCK signature testing

Recent work on CDI TCK showed that the signature testing wasn't updated correctly.
Despite us passing the TCK tests, we didn't catch this bit as it was only ever done manually.

We should add an automated check as TCKs will now produce a proper new sigtest artifact with each release.