Fix openpgp.MessageDetails footguns

[emersion]

Either populate SignatureError with an error before verification is complete, or switch to our own type.

[emersion]

Another footgun: when the signature issuer is unknown, SignatureError is nil but nothing has been verified. The only way to know is to check that SignedBy isn't nil.