allow the chaincode to store a signature root cert for an organization

[sschulz-t]

this is only a temporary solution in order to get things going. we need to think about a proper way of handling a certificate history and revocation lists (see e.g. #21)

this is a preparation step for #20