add file verification support

File verification support allows users to verify files by either URLs or local files.
These files are verified against their signature and the installed release keys.