Fix signed payloads; add functional testing

Several things were broken in the signed payloads workflow due to the switch to gosshnew. This fixes the bugs and adds a functional test to ensure the feature continues working.