Keep manifest list digest in `meta.json` and use in `cosa sign`#4306

jlebon merged 2 commits intocoreos:maincoreos/coreos-assembler:mainfrom

jlebon:pr/manifest-list-digestjlebon/coreos-assembler:pr/manifest-list-digestCopy head branch name to clipboard