Harden attestation validation logic

[cjen1-msft]

We currently parse the attestation then check the signature, and we should do this the other way round:

• first validate the signature on the attestation against all of the roots of trust
• Then parse it and ensure that the validated root of trust matches the attestation's claimed one.