Add a management API for per-tenant C2PA signing identities