Verify all HTTP responses from provider

[Floppy]

Add code to verify the content-digest and HTTP signature of anything that comes back from the provider.

[Floppy]

Backfill and even subscription endpoints do this now, just need to do the same in the registration flow and activation messages.