T1 bootloader: verify firmware signatures based on SignMessage, add signature debugging