security (internal): Moved verifySha256WithRsaSignature from SelfVerifyPolicyManager to PolicyManager.