base-files: use JSON for storing firmware validation info