add opt to get entity files by role; use to get first mezzanine

Collection and entity signature images should be from a mezzanine.
This adds the ability to specify the role when listing files.
Entity.signature() tries to get first mezzanine but returns just
the first file if that doesn't work.