Use fake-signature module

This is the same as in fake-store. Soon we'll have to move FakeStore/Companion
to this repository anyway (so that it can access certain parts from core needed
to support IAP and PI), until then it's probably fine to have this code
duplicated.