New endpoint for uploading JUST a signature for a parcel

[technosophos]

I imagine we need something like

POST _i/${INVOICE}/sign

Which would take JUST a Signature object, and would attack it to the invoice.

The endpoint MUST:

• verify that the signature is valid
• verify that the key is known to the server
• verify that the same key was not already used to sign the invoice in question