signer: don't use crypto11 in mar signer
signer: don't use crypto11 in mar signer

switch to pub key type check and use crypto11's crypto.signer impls

mozilla-services/autograph,mozilla-services/autograph,mozilla-services/autograph