Add sanity checks to each of the TUF repos to prevent regression on updates

[heartsucker]

For example, each class defines

@classmethod
def verify(cls):
    assert len(cls.read_meta('root.json')['signatures']) == 1