feat(new-version): read metadata and save it away

read update metadata like size and rsa signature and push it into the
API. Also introduce tests to make sure this all works.