Implement update signing

[fooker]

The updates should be signed to prevent malicious updates.

Each firmware image should be secured using a sha256 checksum signed by a ed25519 key. The device should check the signature while downloading/flashing and reconfigure the bootloader only if the image is validly signed.