Add BadSignatureError cases to test_arbitrary_package_attack and test_extraneous_dependencies_attack.

Expands the tests to simulate an attack in which a BadHashError is avoided by modifying the metadata to reflect the attacker's changes to a target file. In this case, the tests expect a BadSignatureError.