core_sign_update: initial commit

Takes a filesystem image and generates a update.gz that is signed by N 
provided private keys and verified against the N public keys. This is so we
can do keyrotations.
this can go away since I just removed support for the `-out_metadata` option from delta_generator