Extend driver signature verification to cover full package (.sys, .cat, .inf)

[jamepark4]

With 2f277e0 landing tests have the capacity to install signtool to extend signature verification.

Previously only checked the .sys Authenticode signature. Now also verifies the .cat catalog signature and, when signtool is available via @signtool_path@, cross-checks .sys and .inf hashes against the catalog. Degrades gracefully when signtool is not configured. Test case json would need to provide expected path to the signtool e.g.:

  {
      "name": "driver_sign_check",
      "description": "Verify @driver_module@ driver package signature (.sys, .cat, .inf)",
      "test_system_ref": "VIRT-VSOCK-005",
      "timeout": 60,
      "test_steps": [
          {
              "desc": "Verify driver package signature",
              "guest_run_file": "lib/engines/functest/tests/scripts/verify_driver_signed.ps1",
              "expected_output_contains": "PASS:",
              "timeout": 30,
              "variables": {
                  "@signtool_path@": "@sw_path@\\Signtool_amd64_HLK.exe"
              }
          }
      ]
  }

[gemini-code-assist]

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.