Adding stricter validation of SNS SigningCertURL

Updating the SNS MessageValidator to ensure that the SigningCertURL
is from a trusted source: the host is a known AWS host, the scheme
is http or https, and the file extension is ".pem".
Merge branch 'sns-message-validate-url'
Updating changelog