How it works:

1. we dont need to implement the signatures on hosted openshift update service for now.
2. we will add another container which will serve the signatures and tar-balls
3. using this container will be optional and if someone doesnt need signatures, they can just opt to not use the container.
4. the signatures will be stored in the filesystem
5. oc -mirror is responsible to add the signatures to graph-data container.

Definition of Done:

1. Create test cases and ask Dev/QE for review
2. Conduct pre-merge testing
3. Log bugs in the PR comments