Please allow app image authors to specify the config package signature

[snowch]

E.g.

"defaultConfigPackage": {
    "packageURL": "https://github.com/snowch/kubedirector-centos-ad-ldap/releases/download/refs%2Fheads%2Fmain/appconfig.tgz",
    "packageSignature": "eeac012d945cffe82f92ba642861e88353b480a768847814d0acae4caea004e849ffd6621ff9445f3dd6158974cdd32abe7e84a6769b6334c8462321b1252768",
    "packageSignatureAlgorithm": "sha512",
},

[joel-bluedata]

The idea being that KD will do signature validation at package-install time? What would be the expected result of a validation failure... config_error state?

[snowch]

Yes, I think signature validation failure would need to put the cluster in config_error state.