fix: update certificate checking if disable_range_check is set

[mraszyk]

The disable_range_check condition should check that the call is to the Management Canister, not to an application canister offering a method with the name provisional_canister_create_with_cycles.

Moreover, the certification validation should follow the updated Interface Spec.