don't store signatures in notebooks

store them in an sqlite database instead.

The algorithm and signature are stored and not associated with a path.
This means that moving files around doesn't affect trust,
and every trusted change to a notebook remains trusted.
automatically cull oldest 25% of signatures

when cache size is reached
remove signatures from example notebook metadata