Tanzu CLI should verify the plugin binaries integrity

[prkalle]

Describe the feature request
Tanzu CLI should verify the plugin binary integrity while installing the plugin.

There should be some means to sign the plugin metadata or the binary and validate the signature of the plugin metadata (eg: digest) and ensure the metadata/plugin is not tampered.

Describe alternative(s) you've considered

Additional context