Rekor: check if we are extracting signed payload correctly

[ernoc]

Check if the signed payload is either:

• Always over the 4 fields body, integratedTime, logID, and logIndex as suggested by Rekor here . This is what we're currently doing.
• OR if it is over everything minus the verification field as suggested by Rekor two lines above.