new first run and package signing based on NSS

repurpose py script for signing apps used in automated b2g testing
refactor keygen.js API accordingly