a simpler interface for signing

[thomas-fossati]

The signing path is currently needlessly complex and also, as a consequence, more error prone.

The user has to:

1. instantiate an evidence object
2. add the platform claims-set to the evidence object
3. add the realm claims-set to the evidence object
4. sign the evidence object supplying the RAK and IAK

(note: in #11 we merged 2. and 3. together)

There is no real reason for splitting the add and sign operations (and therefore for the evidence object to exist as a temporary state holder): the two steps can be performed atomically by a standalone function like this:

// Sign returns the signed CCA collection in CBOR format
func Sign(
    platformClaims psatoken.IClaims,
    IClaims realmClaims,
    cose.Signer IAK,
    cose.Signer RAK,
) ([]byte, error)

Note: Doing so also makes it easy to set the realm's public key claim as well as the platform's nonce from the supplied RAK, thus avoiding

• any potential intra-collection mismatch
• the user to compute the (very) raw public key from the signer

[kallal79]

SIR , @thomas-fossati
Requesting assignment for Issue #14. Can implement Sign() interface with clean, testable patch. Will simplify flow and ensure nonce/key consistency.