makepkg: Implement the verify function
This patch implements a new verify function in makepkg. It allows us to do arbitrary authentication on sources before extraction.
There are several new signing and validation methods being implemented
and it would be hard to have makepkg
implement support for things such
as sequoia, cosign or minisign. This would allow us to distribute
generic validation functions.