SDC-3652 introduced handling for the striping of images from signed csars, this story is to verify the csar signature before the processing of the csar.

Note verification of a csar is already implemented in sdc onboarding, however this must now be done up front before we modify the csar (in the case where an ARM is configured) and done without parsing the csar into memory (to avoid OOM)