Signature validation

[Ovyerus]

Drinkup should not blindly trust data from the relay and should validate incoming signatures and only accept valid events. It also should only track active accounts.

Resources:

• https://atproto.com/specs/sync#firehose-validation-best-practices