Add support for top-level signature verification to reloadable XML files

Support for "signed" configuration files at higher layers would be easier to handle by embedding the support into the ReloadableXMLFile base class, and just unmarshalling an enveloped signature object as a child of the root element.

Can reuse verification model from the metadata signature filter in opensaml, and support direct trust or indirect via a trust engine.