Update InCommon example in the docs

InCommon metadata is now served from host md.incommon.org, so the link in the sample XRD file was corrected. Moreover, the metadata server does not support TLS, only XML Signature, so an authentic copy of the metadata signing certificate was included.