core_sign_update: initial commit

Takes a filesystem image and generates a update.gz that is signed by N
provided private keys and verified against the N public keys. This is so
we can do keyrotations.
Merge pull request #284 from philips/multikey

core_sign_update: initial commit