Fixed LowSecurity verification of gems

RubyGems now requires matching checksums and digests.

The digest for the checksums.yaml.gz file was ignored when calculating
digests for signing verification.

When the file was verified the signature would be missing forcing
RubyGems to reject the gem incorrectly.

Now the signature is passed along for verification.