Verifies App Store JWS payloads using leaf certificate from the x5c header.

This verifies the JWS signature. Production Apple integrations should keep App Store Server Notifications configured only on trusted HTTPS endpoints.