fix double hashing of graph

- use Signature instance without hashing (NONEwithECDSA), since the Signingframework algorithms do both canonicalization and hashing of the graph
add signingframework to local repository