Function verify 

pub fn verify(
    pkg: &Path,
    trusted: &[VerifyingKey],
) -> Result<(PluginManifest, String), String>

Verify a plugin package. Returns the manifest and the hex key that signed it.