App Asset signing

[448-OG]

Add the ability to sign app's asset blake3 hashes using ed25519 keypair to ensure assets loaded from fonts are not tainted by an adversary.

This can be read and injected at compile time into a manifest file or binary header