Function verify_manifest_signature 

pub fn verify_manifest_signature(
    manifest: &SegmentManifest,
    public_key: &[u8],
) -> bool

Recomputes the head from the body, then checks the signature against public_key.

Returns false for an unsigned manifest. A caller that treats “unsigned” and “bad signature” differently must test manifest.signature.is_none() first.