edits up to How Should TUF Metadata be Signed?

not ready for Vlad!