verify whole-file signature instead of jarsigner signatures

In recovery, verify a signature that covers the entire zip file,
instead of using the jarsigner format to verify individual files.

Bug: 1328985