Allow Conduit requests to be signed with a public/private keypair

Summary:
This allows callers (in the future, servers in a cluster or instances) to sign Conduit requests with an asymmetric keypair instead of a certificate or token.

Overall we could get away without this, but it seems worth doing for a few reasons:

  - By binding Device identity to SSH keys, we can also authorize them over (real) SSH easily, and not need separate conduit / SSH keys.
  - Asymmetric key cryptography is strong and well understood, and we never have to share or transmit private keys.
  - This is potentially useful to third parties for device identity, in a way that custom Conduit stuff wouldn't be.

Test Plan:
  - Added unit tests.
  - Will actually test once I mess with the other half of this.

Reviewers: hach-que, #blessed_reviewers, btrahan

Reviewed By: #blessed_reviewers, btrahan

Subscribers: epriestley, Korvin

Maniphest Tasks: T6240

Differential Revision: https://secure.phabricator.com/D10402
Process Remarkup in text and HTML email bodies appropriately

Summary: Ref T2617, adding inline styles to handle html email objects

Test Plan: Add code block to a Maniphest comment. Email should show pretty yellow background for code block.

Reviewers: epriestley, #blessed_reviewers

Reviewed By: epriestley, #blessed_reviewers

Subscribers: Korvin, epriestley

Maniphest Tasks: T2617

Differential Revision: https://secure.phabricator.com/D10860
Disallow `[1]` from being interpreted as a marked checkbox in remarkup

Summary: Fixes T6640. `[1]` and similar are more likely footnotes than checkmarks.

Test Plan: {F241922}

Reviewers: btrahan, chad

Reviewed By: chad

Subscribers: epriestley

Maniphest Tasks: T6640

Differential Revision: https://secure.phabricator.com/D10913