RFR: 8354990: Improve negative tests coverage for jpackage signing [v3]

[Alexey Semenyuk]

> Add tests for the following test cases:
>  - Expired certificate specified for signing;
>  - Multiple certificates with the same name in one keychain.
> 
> Adding the new tests revealed an issue with MacCertificate - [JDK-8354989](https://bugs.openjdk.org/browse/JDK-8354989). This issue is also addressed in this PR.
> 
> Additionally:
>  - Moved code to verify signatures in MacSignVerify class and reworked SigningBase verify functions to use MacSignVerify API.

Alexey Semenyuk has updated the pull request incrementally with two additional commits since the last revision:

 - Fix formatting
 - Fix formatting

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/24762/files
  - new: https://git.openjdk.org/jdk/pull/24762/files/95a45098..8630b47c

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=24762&range=02
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=24762&range=01-02

  Stats: 11 lines in 1 file changed: 2 ins; 0 del; 9 mod
  Patch: https://git.openjdk.org/jdk/pull/24762.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/24762/head:pull/24762

PR: https://git.openjdk.org/jdk/pull/24762