add signingscript integration tests

Ideally, we would be able to catch things like incompatible osslsigncode bustage in signingscript, before we roll out.

Integration tests may look like:

• we run a test in docker-worker, after spinning up a mock Autograph instance; or
• we run a test in a docker-worker instance that lives in a staging-Autograph-enabled subnet; we put non-sensitive secrets somewhere in TC secrets, and sign a bogus file with self-signed certs; or
• something else. I'd like to avoid something overengineered.

As long as we're exercising the signing flow, this should catch this type of bustage; we can add coverage as we find additional paths that need it later.

Non vengono indicati file o test esistenti. Inizia individuando il flusso di firma di signingscript e i relativi punti di integrazione con docker-worker, quindi confronta gli approcci proposti con un Autograph simulato e una staging-subnet. Il lavoro è completato quando un test di integrazione esegue la firma di un file fittizio con certificati autofirmati e può rilevare modifiche incompatibili a osslsigncode.