Gracefully handle invalid signatures in attestations

[tyleryasaka]

Checklist:

• [x] Code contains relevant tests for the problem you are solving
• [x] Ensure all new and existing tests pass
• [x] Update any relevant READMEs and docs

Description:

If signature recovery fails, the attestation should simply be flagged invalid; we should not throw an error.