Adapt Update module to new verification technique

- repository.json now contains certificate which is checked against
  a fingerprint
- every observer is stored with a hash verifiying its origins