signed update

An update where the release manifest has been verified against the baked-in minisign public key before any new image is written to the inactive slot. Signature verification is non-skippable. See Security → Update trust chain.