Remove invalid signatures from signables prior to final repository.write()

signables may contain signatures (now invalid) from previous versions of metadata loaded with load_repository().