codesign -dvv and the resource directory: what your signature claims

`codesign -dvv` is the canonical "is this app properly signed" check. It is also the most-misread output in iOS forensics.