RFR: 8354990: Improve negative tests coverage for jpackage signing [v2]

[Alexey Semenyuk]

> Add tests for the following test cases:
>  - Expired certificate specified for signing;
>  - Multiple certificates with the same name in one keychain.
> 
> Adding the new tests revealed an issue with MacCertificate - [JDK-8354989](https://bugs.openjdk.org/browse/JDK-8354989). This issue is also addressed in this PR.
> 
> Additionally:
>  - Moved code to verify signatures in MacSignVerify class and reworked SigningBase verify functions to use MacSignVerify API.

Alexey Semenyuk has updated the pull request incrementally with one additional commit since the last revision:

  Fix compilation error

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/24762/files
  - new: https://git.openjdk.org/jdk/pull/24762/files/f60e1da8..95a45098

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=24762&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=24762&range=00-01

  Stats: 6 lines in 1 file changed: 0 ins; 3 del; 3 mod
  Patch: https://git.openjdk.org/jdk/pull/24762.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/24762/head:pull/24762

PR: https://git.openjdk.org/jdk/pull/24762