tools: explicitly disable nested signing for the MSI-file.

Our current build of osslsigncode doesn't produce valid nested
signatures when using a combination of SHA1 and SHA256 signatures.

Add this workaround for now. Once osslsigncode can produce satisfactory
MSI signatures, we'll revert this change.