MTCS enclave must sign the setoffs output

[hu55a1n1]

Summary

This is so that the on-chain handler can verify that the setoffs came from running clearing from within the enclave (i.e. proof of integrity for optimality of MTCS).

[ebuchman]

This is about RA for SubmitSetoffs as done in #57?

Reopen if its about something else