activitypub: verify remote http signature digests by recomputing the digest and replacing the digest header