Separate the helper scripts into a new shim-signed-common package

Separate this from the actual signed shim binaries so that we can
sensibly support co-installability using Multi-Arch. Closes: #928486