add signature validation for inbound profile/kind0 events

[alltheseas]

what happens

ndk does not validate profile events with missing/malformed signatures

suggestion

check for signatures for inbound profile events

context

see yakihonne/ndk finding: nostrability/nostrability#262 (comment)

potentially related ?

#350