base-files: introduce sysupgrade signature chain verification